Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@fluid-experimental/attributable-map
Advanced tools
IMPORTANT: This package is experimental. Its APIs may change without notice.
Do not use in production scenarios.
This experimental DDS is a copy of SharedMap
which additionally tracks attribution information, such as the user who made an update and the timestamp of the change. Please refer to the description of attributor for more details.
The SharedMap distributed data structure can be used to store key-value pairs. It provides the same API for setting and retrieving values that JavaScript developers are accustomed to with the Map built-in object.
To create a SharedMap
, call the static create method:
const myMap = SharedMap.create(this.runtime, id);
Unlike the JavaScript Map
, a SharedMap
's keys must be strings. The value must only be plain JS objects or handles (e.g. to another DDS or Fluid objects).
In collaborative scenarios, the value is settled with a policy of last write wins.
SharedMap
is an EventEmitter
, and will emit events when other clients make modifications. You should register for these events and respond appropriately as the data is modified. valueChanged
will be emitted in response to a set
or delete
, and provide the key and previous value that was stored at that key. clear
will be emitted in response to a clear
.
FAQs
Distributed map
The npm package @fluid-experimental/attributable-map receives a total of 538 weekly downloads. As such, @fluid-experimental/attributable-map popularity was classified as not popular.
We found that @fluid-experimental/attributable-map demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.