Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@nerdwallet/epic-state-subscriptions
Advanced tools
An epic state subscription library using Redux-Observable
Epicly perform actions and side effects when *.the.paths.you.care.about
change in the Redux store.
If you have not used Redux-Observable Epics before, here's a link to the documentation.
There is an additional peer dependency of redux-observable@^1.1.x
npm install epic-state-subscriptions
Import the createStateSubscription
operator and add it to your Epic like any other operator. Pass it the paths that you want to subscribe to in the Redux store and it will transform the action stream into a stream of path changes.
import { createStateSubscription } from 'epic-state-subscriptions';
const exampleEpic = (action$, state$) =>
action$.pipe(
createStateSubscription(state$, {
paths: ['x.y.z', 'a.b.*', '*.c.d'],
}),
map(paths => {
paths.forEach({ pathPattern, path } => {
console.log(`path ${path} has been reported to change because of matched pattern ${pathPattern}`);
});
return sideEffectAction(changeSet);
})
);
The path changes are emitted as objects with the structure below:
Key | Type | Description |
---|---|---|
path | String | The path that changed in the Redux store |
pathPattern | String | The state subscription path pattern that triggered the path to change |
prevState | Any | The previous state of the path that changed in the Redux store |
nextState | Any | The new state of the path that changed in the Redux store |
In the above example, if path a.b.c
had changed from false
to true
the path object emitted would be { prevState: false, nextState: true, path: 'a.b.c', pathPattern: 'a.b.*' }
.
Note: Since operators do not normally get access to the
state$
stream, it is passed explicitly as the first argument, followed by the configuration options.
Option | Type | Required | Default | Description |
---|---|---|---|---|
key | String | false | Random uuid | Optional key name to identify the subscription |
paths | Array | false | [ ] | The . delimited initial paths to watch in the Redux store with support for wildcards such as store.*.y |
As a standard RxJS operator, your Epic can chain createStateSubscription
to support additional use cases like buffering path changes:
import { createStateSubscription } from 'epic-state-subscriptions';
const exampleEpic (action$, state$) =>
action$.pipe(
// Buffer the actions changes since they are frequent
bufferTime(500),
// Only emit updates to the state subscription if actions
// have occurred in the buffer interval
filter(actions => actions.length > 0),
createStateSubscription(state$, {
paths: ['a.b.c'],
}),
map(paths => {
paths.forEach({ prevState, nextState, pathPattern, path } => {
console.log(`path ${path} has been reported to change because of matched pattern ${pathPattern}`);
});
return sideEffectAction(changeSet);
})
);
If a config will need dynamic state subscription paths as the application runs, there is a provided state subscription reducer and action for overriding the default paths initialized in the config which you can use.
Include the state subscriptions reducer in your combineReducers
redux configuration:
import { stateSubscriptionReducer } from 'epic-state-subscriptions';
import { combineReducers } from 'redux';
const rootReducer = combineReducers([...reducers, stateSubscriptionReducer]);
and then you can dispatch the overrideStateSubscriptionPaths
action:
import { overrideStateSubscriptionPaths } from 'epic-state-subscriptions';
dispatch(overrideStateSubscriptionPaths({ key: 'exampleKey', paths: ['state.x.y'] });
The state subscription key passed in the action should match the key in the createStateSubscription
config. It automatically will now favour configurations in the reducer at that subscription key over the static initial paths specified in the config.
You can use the tap
operator to perform side effects and use the ignoreElements
operator to instruct the stream to not emit elements and fire a termination event:
import { ignoreElements, tap } from 'rxjs/operators';
import { createStateSubscription } from 'epic-state-subscriptions';
import { sideEffectAction } from './actions';
const exampleEpic = (action$, state$) =>
action$.pipe(
createStateSubscription(state$, {
paths: ['x.y.z', 'a.b.*', '*.c.d'],
}),
tap(paths => {
paths.forEach({ pathPattern, path } => {
console.log(`path ${path} has been reported to change because of matched pattern ${pathPattern}`);
});
}),
ignoreElements()
);
An operator that is applied to the observable more than once needs to share the same key as the previous iteration to preserve its cache. Specify a key
in your subscription and it will behave as expected.
import { ignoreElements, tap } from 'rxjs/operators';
import { createStateSubscription } from 'epic-state-subscriptions';
import { sideEffectAction } from './actions';
const exampleEpic = (action$, state$) =>
action$.pipe(
mergeMap(action => {
return of(action).pipe(
createStateSubscription(state$, {
key: 'dynamicSubscription',
paths: ['x.y.z', 'a.b.*', '*.c.d'],
}),
tap(paths => {
paths.forEach({ pathPattern, path } => {
console.log(`path ${path} has been reported to change because of matched pattern ${pathPattern}`);
}),
ignoreElements()
)
}),
);
FAQs
An epic state subscription library using Redux-Observable
We found that @nerdwallet/epic-state-subscriptions demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 22 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.