
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@minswap/tiny-invariant
Advanced tools
A tiny invariant alternative.
invariant?An invariant function takes a value, and if the value is falsy then the invariant function will throw. If the value is truthy, then the function will not throw.
import invariant from 'tiny-invariant';
invariant(truthyValue, 'This should not throw!');
invariant(falsyValue, 'This will throw!');
// Error('Invariant violation: This will throw!');
You can also provide a function to generate your message, for when your message is expensive to create
import invariant from 'tiny-invariant';
invariant(value, () => getExpensiveMessage());
tiny-invariant?The library: invariant supports passing in arguments to the invariant function in a sprintf style (condition, format, a, b, c, d, e, f). It has internal logic to execute the sprintf substitutions. The sprintf logic is not removed in production builds. tiny-invariant has dropped all of the sprintf logic. tiny-invariant allows you to pass a single string message. With template literals there is really no need for a custom message formatter to be built into the library. If you need a multi part message you can just do this: invariant(condition, 'Hello, ${name} - how are you today?')
tiny-invariant is useful for correctly narrowing types for flow and typescript
const value: Person | null = { name: 'Alex' }; // type of value == 'Person | null'
invariant(value, 'Expected value to be a person');
// type of value has been narrowed to 'Person'
(condition: any, message?: string | (() => string)) => voidcondition is required and can be anythingmessage optional string or a function that returns a string (() => string)# yarn
yarn add tiny-invariant
# npm
npm install tiny-invariant --save
message for kb savings!Big idea: you will want your compiler to convert this code:
invariant(condition, 'My cool message that takes up a lot of kbs');
Into this:
if (!condition) {
if ('production' !== process.env.NODE_ENV) {
invariant(false, 'My cool message that takes up a lot of kbs');
} else {
invariant(false);
}
}
babel-plugin-dev-expressiontsdx (or you can run babel-plugin-dev-expression after TypeScript compiling)Your bundler can then drop the code in the "production" !== process.env.NODE_ENV block for your production builds to end up with this:
if (!condition) {
invariant(false);
}
NODE_ENV to production and then rollup will treeshake out the unused codees (EcmaScript module) buildcjs (CommonJS) buildumd (Universal module definition) build in case you needed itWe expect process.env.NODE_ENV to be available at module compilation. We cache this value
🤘
FAQs
A tiny invariant function
The npm package @minswap/tiny-invariant receives a total of 470 weekly downloads. As such, @minswap/tiny-invariant popularity was classified as not popular.
We found that @minswap/tiny-invariant demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.