
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@marble-seeds/task
Advanced tools
npm i @marble-seeds/@marble-seeds/tasks
In your tasks folder create your file with
const Task = require('@marble-seeds/tasks')
const task = new Task(async function (argv) {
console.log(argv)
return { foo: true }
})
if (require.main === module) {
task.setCliHandlers()
task.run()
} else {
module.exports = task
}
The last part will allow you to call it as a CLI or be loaded on your app and run as part of you app
Task are small units of logic that should be repetable and composable.
Task to be able have repetable tasks, we need to care about 2 concepts:
By carring about this elements logs test of task can be created by recording the 3 elements and then replay them.
To be able to treat task as black boxes, all the interactions to fetch data, save elements need to be moved to boundaries.
const task = new Task(async function (argv, { getData }) {
const data = async getData()
console.log(argv, data)
return { ...data, ...argv }
}, {
boundaries : {
getData: async () => {
// someting
return data
}
}
})
By defining bounderies in this form, we can record the interactions from the task with other elements allowing to track them and mock them.
Boundary have 4 modes:
With this modes bounderies can be used as cache or to generate test by passing the data to a RecordTape to re-run the calls.
Takes a task action(function) and a timeout as params.
Runs the task action asynchronously. Takes the function arguments and a config object with a timeout option.
Lets the taks that it will run as a CLI program.
FAQs
## Install with
We found that @marble-seeds/task demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.