Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
@homer0/deferred
Advanced tools
Small utility to create a deferred promise
Using it is really simple, you call the deferred()
function and get an object with promise
, resolve
and reject
. You return the promise
property and then call resolve
or reject
to either resolve the promise or reject it.
Now, a reason to use this is for when you have another service/function/something asking for something that your code hasn't even started to do:
import * as fs from 'fs/promises';
import { deferred, type DeferredPromise } from '@homer0/deferred';
class MyServiceThatLoadsAfile {
private defer: DeferredPromise<string>;
private file: string;
getFileContents(): Promise<string> {
if (this.file) return Promise.resolve(this.file);
return this.defer.promise;
}
async loadTheFile() {
try {
this.file = await fs.readFile('some-path', 'utf-8');
this.defer.resolve(this.file);
} catch (err) {
this.defer.reject(err);
}
}
}
const myService = new MyServiceThatLoadsAfile();
myService.getFileContents().then((contents) => {
console.log('GOT IT', contents);
});
// ...
myService.loadTheFile();
Ok, there's a lot going on this example, let's break it:
MyServiceThatLoadsAFile
creates a deferred promise on "its constructor".getFileContents
should return the file contents, but because the file is not loaded yet (as loadTheFile
has not been called), it returns the deferred promise.loadTheFile
gets called, it loads the file and either resolves or rejects the deferred promise, so the getFileContents().then(...)
gets finally called.I wanted to keep the example small, but on a real app, getFileContents
is probably called by other service that has no idea the instance was just created or that loadTheFile
hasn't been called yet.
As this project is part of the packages
monorepo, some of the tooling, like ESLint and Husky, are installed on the root's package.json
.
Task | Description |
---|---|
test | Runs the unit tests. |
build | Bundles the project. |
FAQs
Small utility to create a deferred promise
We found that @homer0/deferred demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.