
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@dkh-dev/reduxie
Advanced tools
A redux toolkit for simple use cases
Inspired by @reduxjs/toolkit.
Why all these reinventing the wheel?
@reduxjs/toolkit makes use of immer, which isn't very useful when the project is relatively small. This utility instead encourages the use of setter-only action creators.
@reduxjs/toolkit also comes with default middlewares that cause poor performance when dispatching large objects (in development only, but still bad).
redux/slice/profile.js
import { createSlice } from '@dkh-dev/reduxie'
const { slice, selectors, actions } = createSlice('profile', {
name: null,
})
export default slice
export const { getName } = selectors
export const { setName } = actions
redux/store.js
import { configureStore } from '@dkh-dev/reduxie'
import thunk from 'redux-thunk'
import profile from './slice/profile'
const store = configureStore({
slices: [ profile ],
middlewares: [ thunk ],
})
export default store
redux/actions.js
import api from '../api'
import { setName } from './slice/profile'
export const login = credentials => async dispatch => {
const user = await api('/login', credentials)
// on logged in
dispatch(setName(user.name))
}
components/profile.js
import React from 'react'
import { useSelector } from 'react-redux'
import { nameSelector } from '../redux/slice/profile'
const Profile = () => {
const name = useSelector(nameSelector)
return <p>Name: { name }</p>
}
export default Profile
components/login.js
import React from 'react'
import { useDispatch } from 'react-redux'
import LoginForm from './login-form'
import { login } from '../redux/actions'
const Login = () => {
const dispatch = useDispatch()
const handleSubmit = (username, password) => {
dispatch(login({ username, password }))
}
return <LoginForm onSubmit={ handleSubmit } />
}
export default Login
FAQs
A redux toolkit for simple use cases
We found that @dkh-dev/reduxie demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.