Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@libre/atom
Advanced tools
@libre/atom
provides a data type called Atom
s and a few functions for working with Atom
s. It is heavily inspired by atom
s in Clojure(Script). While the full power of Clojure atom
s cannot be experienced in JavaScript's single-threaded runtime, Atom
s do still offer similar benefits due to the highly asynchronous and event-driven nature of JavaScript.
Atoms provide a predictable way to manage state shared by multiple components of a
program as that state changes over time. They are particularly useful in the functional and reactive programming paradigms, where most components of a program are pure functions operating on immutable data. Atoms
provide a controlled mechanism for mutability that lets multiple components access and update the same value without risking mutating another component's reference to it in the middle of some process or asynchronous operation.
Atom
:import { Atom } from "@libre/atom";
const appState = Atom.of({
color: "blue",
userId: 1
});
deref
You can't inspect Atom
state directly, you have to deref
erence it, like this:
import { deref } from "@libre/atom";
const { color } = deref(appState);
swap
You can't modify an Atom
directly. The main way to update state is with swap
. Here's its call signature:
function swap<S>(
atom: Atom<S>,
updateFn: (state: DeepImmutable<S>) => S
): void;
updateFn
is applied to atom
's state and the return value is set as atom
's new state. There are just two simple rules for updateFn
:
To illustrate, here is how we might update appState
's color:
import { swap } from "@libre/atom";
const setColor = color =>
swap(appState, state => ({
...state,
color: color
}));
Note: Our
updateFn
is spreading the old state onto a new object before overridingcolor
. This is an easy way to obey the rules ofupdateFn
. If manually spreading values seems tedious, there are many libraries that offer convenient functions for operating on JS data structures in an immutable manner, e.g. see ramda, sanctuary, crocks, or (for the wizards among us) fp-ts.
NPM: npm install --save @libre/atom
Yarn: yarn add @libre/atom
CDN: <script src="https://unpkg.com/@libre/atom" />
window["@libre/atom"]
ES6 import
import { Atom, deref, set, swap } from "@libre/atom";
CommonJS require
const { Atom, deref, set, swap } = require("@libre/atom");
Web <script />
tag
const { Atom, deref, set, swap } = window["@libre/atom"];
You can find API docs for @libre/atom
here
Please open an issue if you have any questions, suggestions for improvements/features, or want to submit a PR for a bug-fix (please include tests if applicable).
FAQs
Unknown package
We found that @libre/atom demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.