
Security News
The Next Open Source Security Race: Triage at Machine Speed
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.
@ksryy/parallel-async
Advanced tools
Moved to @ksryy/parallel-async due to OTP misconfiguration (may move back in a few days)
A zero-dependency async parallel task runner. Powered by Promise.
NOTE: This package is designed for both Webpack and Node.js usage, but if you are using a enviroment that does not support Promise (such as IE) you need to polyfill it by yourself.
npm install @ksryy/parallel-async
Then import it use either CommonJS:
const parallel = require('parallel-async');
or ESModule:
import parallel from 'parallel-async'
First you need to pass two parameters to the parallel function. One object and one callback function.
The object contains two things: the task list (property tasks) and a optional parameter that will be passed to the outer layer function.
The tasks property should be an Array. It contains the task that you want to run.
You can see that I emphasized the "outer layer function". This library is powered by Promise, so the task should orginally recieve only two parameter, resolve and reject as in Using promises at MDN, but what if you want to give your task something from outside that only works in the task function's scope? The solution is to wrap your function that will return a function that actually become the Promise. The outer layer will recieve that thing as a parameter, and then the outer layer will retern the inner layer function that actually executes in the promise. Because of closure, the inner function can still access the variables in the outer function's scope. Here's a example:
functon eg(param) {
return function (resolve,reject) {}
}
The returned function is what actually run in the Promise.
The recommended way to pass in the task list is to use an Array, but you can also use Generator or Set too.
There is also something tricky about the callback function that you need to provide. The callback function will be called more than once.
FAQs
A zero-dependency async parallel task runner
We found that @ksryy/parallel-async demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.

Security News
gem.coop is testing registry-level dependency cooldowns to limit exposure during the brief window when malicious gems are most likely to spread.