
Security News
/Research
node-ipc npm Package Compromised in Supply Chain Attack
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
@esmj/task
Advanced tools
Tiny task management library which divide long task. Improve core web vitals and browser responsiveness.
The @esmj/task is tiny package for divide long task to new tasks and improve browser responsiveness, user experience and INP (core web vitals) metric. The new tasks are creating only if it is need.
npm install @esmj/task
It works for both Javascript modules (ESM and CJS).
import { autoYield } from '@esmj/task';
(async () => {
const tasks = [
longRunnigTask1,
normalTask1,
normalTask2,
longRunnigTask2
];
for (const task of tasks) {
await autoYield()
await task();
}
})
Type: () => Promise<void>
Method divide long task to new tasks if it is need. If autoYield logic is turn off returns immediately resolved Promise.
Type: () => Promise<void>
Method create new task for every call.
Type: () => void
Method reset logic for creating new tasks.
Type: (state: boolean) => void
Method turn on/off autoYield logic.
FAQs
Tiny task management library which divide long task. Improve core web vitals and browser responsiveness.
The npm package @esmj/task receives a total of 139 weekly downloads. As such, @esmj/task popularity was classified as not popular.
We found that @esmj/task demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.