
Security News
PEP 810 Proposes Explicit Lazy Imports for Python 3.15
An opt-in lazy import keyword aims to speed up Python startups, especially CLIs, without the ecosystem-wide risks that sank PEP 690.
@dvtng/cosmos
Advanced tools
Proof of concept for a flexible data-fetching framework for React.
Data sources are described using models:
const Weather = model({
type: "Weather",
refresh: { minutes: 5 },
get({ latitude, longitude }) {
return fetch(`https://weather.example.com/${latitude}/${latitude}`).then(
(resp) => resp.json()
);
},
});
Models can then be queried inside components:
function WeatherIcon({ latitude, longitude }) {
const [weather] = useModel(Weather({ latitude, longitude }));
return <img src={weather ? weather.iconUrl : placeholderIconUrl} />;
}
We can use suspense if preferred using waitFor
:
function WeatherIcon({ latitude, longitude }) {
const [weather] = waitFor(useModel(Weather({ latitude, longitude })));
return <img src={weather.iconUrl} />;
}
Models can also represent data sources that continuously emit data, such as websockets or event listeners:
const MyLocation = model({
type: "MyLocation",
emitter(emit) {
const id = navigator.geolocation.watchPosition((position) => {
emit(position.coords);
});
// Stop watching when this model is no longer used
return () => {
clearWatch(id);
};
},
});
If we frequently need to get the weather at the current location, we can combine these two models into one:
const MyWeather = model({
type: "MyWeather",
derive(getModel) {
const [coords] = waitFor(getModel(MyLocation()));
return getModel(Weather(coords));
},
});
function MyWeatherIcon() {
const [myWeather] = waitFor(useModel(MyWeather()));
return <img src={myWeather.iconUrl} />;
}
Cosmos automatically tracks the dependencies of MyWeather so that it updates whenever either MyLocation or Weather updates.
It also tracks usages of each model so that they are initialized once when used by a component, and then cleaned up when no longer needed.
FAQs
Proof of concept for a flexible data-fetching framework for React.
We found that @dvtng/cosmos demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
An opt-in lazy import keyword aims to speed up Python startups, especially CLIs, without the ecosystem-wide risks that sank PEP 690.
Security News
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.