
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@iaworkspace/rxdom
Advanced tools
[RxDOM](https://github.com/IsaacAderogba/rxdom) is s a JavaScript library for creating user interfaces. Instead of requiring a compilation step like modern frameworks, RxDOM works with HTML **fragments**, **components**, and **elements** directly to const
RxDOM is s a JavaScript library for creating user interfaces. Instead of requiring a compilation step like modern frameworks, RxDOM works with HTML fragments, components, and elements directly to construct reactive interfaces.
RxDOM attempts to be a middle ground between writing laborious vanilla JavaScript and using heavyweight frameworks such as React or NextJs. This makes it suitable for small projects. For my needs, this means rapid prototyping and experimentation without the complicated setup of Webpack and so on.
Library | Description |
---|---|
@iatools/rxdom | Zero-dependency library for creating user interfaces. |
RxDOM, like many of my projects, has been primarily built for my use cases. If you wish to extend the base functionality, you're encouraged to fork the package.
RxDOM can be installed through your preferred package manager.
npm install @iatools/rxdom
You can then import the RxDOM
class and any desired component and fragment functions.
import { RxDOM, FC, h1 } from "@iatools/rxdom";
const App = FC(() => {
return h1({ content: ["hello, world!"] });
});
const rxdom = new RxDOM();
rxdom.render(App(), document.getElementById("app")!);
"hello, world!” using a function component
You can also use an ES6 class to define a component. This enables you to manage your own state and hook into lifecycle methods. Components are then “functionalized” using the static Component.FC
method, leading to a consistent component usage experience.
import { RxDOM, Component, h1 } from "@iatools/rxdom";
class AppComponent extends Component {
state = { greeting: "hello, world!" };
onMount() {
console.log("App mounted");
return () => console.log("App unmounted");
}
render() {
return h1({ content: [this.state.greeting] });
}
}
const App = Component.FC(AppComponent);
const rxdom = new RxDOM();
rxdom.render(App({ key: "root" }), document.getElementById("app")!);
"hello, world!” using a class component and lifecycle methods.
A fragment in RxDOM is a lightweight wrapper around a HTML tag. RxDOM exports fragments for each valid tag.
import { a, abbr, address, ... } from "@iatools/rxdom"
Using fragments is then as simple as invoking them and optionally passing child fragments or primitive values as their content.
import { RxDOM, FC, h1, i } from "@iatools/rxdom";
const App = FC(() => {
return h1({
style: { color: "red" },
content: [i({ content: ["hello, world!"] })],
});
});
const rxdom = new RxDOM();
rxdom.render(App(), document.getElementById("app")!);
This renders a red h1
tag with italicized content.
By convention, fragments are lower cased.
RxDOM supports both function, class, and provider components.
Function Components
Function components are strictly functional, with no utilities to manage their own state. This makes them highly resilient and predictable.
While unable to manage their own state, function components can still receive props
from a direct parent component or context
from ancestor provider components.
const FunctionComponent = FC((props, context) => {
return h1({ content: ["hello, world!"] });
});
Class Components
Class components enhance component functionality by providing a way to manage state and react to lifecycle events. By allowing state of lifecycle events, class components are incredibly powerful - but at the cost of increased complexity.
Class components are created by extending the Component
constructor. Before use, they must be “functionalized” through use of the Component.FC
static method.
class ClassComponent extends Component {
state = { greeting: "hello, world!" };
render() {
console.log(this.props, this.context)
return h1({ content: [this.state.greeting] })
}
}
const Class = Component.FC(ClassComponent);
Provider Components
Provider components allow us to easily pass props down the component hierarchy. They’re similar to context components as defined by React. Provider components are created via the createProvider
factory method.
type ProviderComponentProps = { greeting: string };
const ProviderComponent = createProvider<ProviderComponentProps>();
Example
The following example demonstrates how provider, class, and function components may be used together.
// provider component
type ProviderComponentProps = { greeting: string };
const ProviderComponent = createProvider<ProviderComponentProps>();
// class component
class ClassComponent extends Component {
state = { greeting: "hello, world!" };
render() {
return ProviderComponent.Context({
greeting: this.state.greeting,
content: [FunctionComponent({ greeting: "hello, world!" })],
});
}
}
const Class = Component.FC(ClassComponent);
// function component
const FunctionComponent = FC<{}, { provider: ProviderComponentProps }>(
(props, context) => {
return h1({ content: [context.provider.greeting] });
},
{ provider: ProviderComponent }
);
const rxdom = new RxDOM();
rxdom.render(Class({ key: "root" }), document.getElementById("app")!);
While only 25 lines of code, it packs a lot of information about the interaction between these component types. Refer to the guides section for more guided walkthroughs.
RxDOM provides first class support for rendering arbitrary DOM elements into the user interface. While these elements are treated as black boxes for the most part, RxDOM provides an update hook for when their parent fragments or components have changed.
This was an important design goal for using RxDOM with my Pine editor framework. Pine, which uses the Prosemirror toolkit, likes to manage its own DOM representation for its content blocks. This allows for seamless integration of those content blocks.
import { RxDOM, Component, createElement, div, input } from "@iatools/rxdom";
const externalInput = createElement({
dom: document.createElement("input"),
updater: ({ dom }) => dom,
});
class AppComponent extends Component<{}, string> {
state = "";
render() {
const internalInput = input({
value: this.state,
oninput: e => this.setState(e.target.value),
});
return div({
content: [internalInput, externalInput],
});
}
}
const App = Component.FC(AppComponent);
const rxdom = new RxDOM();
rxdom.render(App(), document.getElementById("app")!);
Class components supports four lifecycle methods:
1) Construction
This lifecycle can be hooked into by simply defining a constructor method. This allows you to define the initial state of your component based on the starting props.
type AppProps = { placeholder: string };
type AppState = { value: string };
class AppComponent extends Component<AppProps, AppState> {
constructor(props: AppProps) {
super(props);
this.state = { value: props.placeholder || "Start writing..." };
}
...
}
2) Mounting
A component mounts once all of its descendants have mounted. The onMount
method allows you to hook into this.
class AppComponent extends Component<AppProps, AppState> {
state = { value: ""}
onMount() {
console.log("Mounted");
}
...
}
3) Updating
Components update either due to a state
change or a change in their props
. The onUpdate
method allows you to respond to such updates.
class AppComponent extends Component<AppProps, AppState> {
state = { value: ""}
onUpdate() {
console.log("Updated");
}
...
}
By the time
onUpdate
triggers, the component's UI will have already re-rendered. If you wish to tap in to this before-render phase, then you can use use therender
method in the space before returning an element.
class AppComponent extends Component<AppProps, AppState> {
state = { value: "" };
render() {
console.log("Before render");
return div({ ... });
}
}
4) Unmounting
Lastly RxDOM allows you to do clean up logic just before a component unmounts. To tap into this lifecycle, simply return a function from the onMount
lifecycle described above.
class AppComponent extends Component<AppProps, AppState> {
state = { value: "" };
onMount() {
console.log("Mount")
return () => {
console.log("Unmount");
};
}
...
}
RxDOM abstracts DOM rendering into a Renderer
interface. It currently exports a SyncRenderer
but can be extended to support async rendering if performance is paramount.
const rxdom = new RxDOM(new SyncRenderer());
rxdom.render(App(), document.getElementById("app")!);
This was another important design goal for using RxDOM with Pine. Pine's content DOM relies on predictable, synchronous rendering. Trying to manage the content DOM with an asynchronous renderer leads to subtle bugs.
Unlike modern frameworks such as Svelte and SolidJs, RxDOM uses a Virtual DOM to minimize interaction with the real DOM. This is done by way of diff between Virtual DOM and real DOM nodes.
Further, RxDOM decides which DOM nodes to update through order-based and key-based reconciliation. Importantly, RxDOM only requires keys when creating stateful Components
. While this may seem tedious, it helps avoid a lot of subtle problems with reconciliation that plague frameworks like React.
For example, many developers may not realize that the following presents a problem for components that manage state:
return (
<ul>
<StatefulComponent type="b" />
<StatefulComponent type="c" />
</ul>
);
Render #1
return (
<ul>
<StatefulComponent type="a" />
<StatefulComponent type="b" />
<StatefulComponent type="c" />
</ul>
);
Render #2
Because the returned list differs between renders, React will match the previous <StatefulComponent type="b" />
with the new <StatefulComponent type="a" />
. This is troublesome, because <StatefulComponent type="a" />
actually inherits the state of <StatefulComponent type="b" />
instead of creating its own. What's worse, React doesn't detect and warn you about these issues.
The simple fix for this, as well as a host of other subtle issues, is to require keys for stateful components.
When you create fragments, components, and elements using RxDOM
, you are in fact creating RxNode
s. These nodes are simple JavaScript objects which specify the type
and props
of an element.
Naturally, an RxNode
can either be a fragment, component, or element:
type RxNode = RxFragment | RxComponent | RxElement;
RxDOM uses the spec from the RxNode
s in order to construct DOMElement
s.
type DOMElement = HTMLElement | Text;
To support Virtual DOM rendering, RxDOM introduces another data structure called a FiberInstance
. A fiber instance simply keeps reference to the constructed DOMElement
, the associated RxNode
that was used for its construction, and any children or child FiberInstance
s. Similarly, there's different fiber instance types for fragments, components, and elements:
export type FiberInstance = FiberComponent | FiberFragment | FiberElement;
FAQs
[RxDOM](https://github.com/IsaacAderogba/rxdom) is s a JavaScript library for creating user interfaces. Instead of requiring a compilation step like modern frameworks, RxDOM works with HTML **fragments**, **components**, and **elements** directly to const
We found that @iaworkspace/rxdom demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.