
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@lwc/signals
Advanced tools
This is an experimental package containing the interface expected for signals.
A key point to note is that when a signal is both bound to an LWC class member variable and used on a template, the LWC engine will attempt to subscribe a callback to rerender the template.
A Signal is an object that holds a value and allows components to react to changes to that value.
It exposes a .value property for accessing the current value, and .subscribe methods for responding to changes.
import { signal } from 'some/signals';
export default class ExampleComponent extends LightningElement {
count = signal(0);
increment() {
this.count.value++;
}
}
In the template, we can bind directly to the .value property:
<template>
<button onclick="{increment}">Increment</button>
<p>{count.value}</p>
</template>
This package supports the following APIs.
This is the shape of the signal that the LWC engine expects.
export type OnUpdate = () => void;
export type Unsubscribe = () => void;
export interface Signal<T> {
get value(): T;
subscribe(onUpdate: OnUpdate): Unsubscribe;
}
A base class is provided as a starting point for implementation.
export abstract class SignalBaseClass<T> implements Signal<T> {
abstract get value(): T;
private subscribers: Set<OnUpdate> = new Set();
subscribe(onUpdate: OnUpdate) {
this.subscribers.add(onUpdate);
return () => {
this.subscribers.delete(onUpdate);
};
}
protected notify() {
for (const subscriber of this.subscribers) {
subscriber();
}
}
}
FAQs
Provides the interface to interact with reactivity from outside the framework
The npm package @lwc/signals receives a total of 7,752 weekly downloads. As such, @lwc/signals popularity was classified as popular.
We found that @lwc/signals demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 15 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.