Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@microsoft/paris
Advanced tools
Library for the implementation of Domain Driven Design with TypeScript + RxJS
🚧🚧🚧Danger🚧🚧🚧:
Paris is unmaintained. The new decorators proposal, the new RxJS syntax, useDeclareForClassFields
in modern TypeScript and modern decorator metadata meant that in order to property maintain Paris it'd need an effective rewrite. We no longer use Angular for new code internally and our React/MobX code does not use RxJS.
We are gradually migrating our internal code from it to our new next-gen data modeling framework. It may eventually be open source but honestly that's a lot of work so we'll see. It is inspired by Paris but does not share any code with it.
You are free to use this code and we will take pull requests but we will not regularly fix bugs or draft new releases.
Paris is a data management library for webapps, using TypeScript and RxJS to implement Domain-Driven Design.
Package size: ~15.8kb (gzipped)
Paris is a TypeScript library and also requires RxJs and lodash, so you'll need both those packages, if you don't already use them:
npm install --save lodash-es rxjs typescript
Install the Paris NPM package:
npm install --save @microsoft/paris
First, define an Entity:
// todo-item.entity.ts
import { Entity, EntityModelBase, EntityField } from "@microsoft/paris";
@Entity({
singularName: "Todo Item",
pluralName: "Todo Items",
endpoint: "todo/items"
})
export class TodoItem extends EntityModelBase{
@EntityField()
text: string;
@EntityField()
time: Date;
}
The above defines an Entity, which can be used to query the todo/items server endpoint, like this:
import { Paris } from "@microsoft/paris";
const paris = new Paris();
paris.getItemById(TodoItem, 1).subscribe((todoItem:TodoItem) => {
console.log("Todo item with ID 1: ", todoItem);
});
Check the Wiki for advanced uses and explanations.
Check the Source Typescript models for a detailed look under the hood.
This project welcomes contributions and suggestions. Most contributions require you to agree to a Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us the rights to use your contribution. For details, visit https://cla.microsoft.com.
When you submit a pull request, a CLA-bot will automatically determine whether you need to provide a CLA and decorate the PR appropriately (e.g., label, comment). Simply follow the instructions provided by the bot. You will only need to do this once across all repos using our CLA.
This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.
Unit tests are written using Jest, and executed with ts-jest.
FAQs
Library for the implementation of Domain Driven Design with TypeScript + RxJS
The npm package @microsoft/paris receives a total of 3 weekly downloads. As such, @microsoft/paris popularity was classified as not popular.
We found that @microsoft/paris demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.