
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@nymphjs/client
Advanced tools
Powerful object data storage and querying.
The Nymph Client allows you to query and push data to a Nymph REST server from the browser or Node.js. You can also subscribe to entities and queries on a Nymph PubSub server and be notified of changes.
npm install --save @nymphjs/client
This package is the Nymph client for browsers and Node.js, but requires at least Node.js 22 to be used in Node. You can find ES modules in dist, or TS source in src.
Here's an overview:
import { Nymph, PubSub } from '@nymphjs/client';
import TodoClass from './Todo.js';
const nymphOptions = {
restUrl: 'https://yournymphrestserver/path/to/your/endpoint',
pubsubUrl: 'wss://yournymphpubsubserver',
};
const nymph = new Nymph(nymphOptions);
const pubsub = new PubSub(nymphOptions, nymph);
const Todo = nymph.addEntityClass(TodoClass);
// Now you can use Nymph and PubSub.
const myTodo = new Todo();
myTodo.name = 'This is a new todo!';
myTodo.done = false;
await myTodo.$save();
let allMyTodos = await nymph.getEntities({ class: Todo });
let subscription = pubsub.subscribeWith(myTodo, () => {
// When this is called, the entity will already contain new data from the
// publish event. If the entity is deleted, the GUID will be set to null.
if (myTodo.guid != null) {
alert('Somebody touched my todo!');
} else {
alert('Somebody deleted my todo!');
subscription.unsubscribe();
}
});
// ...
// Subscribing to a query.
let todos = [];
let userCount = 0;
let subscription = pubsub.subscribeEntities(
{
class: Todo.class,
},
{
type: '&',
'!tag': 'archived',
},
)(
(update) => {
// The first time this is called, `update` will be an array of Todo
// entities. After that, `update` will be a publish event object.
// This takes an existing array of entities and either updates it to match
// another array, or performs actions from a publish event object to update
// it.
pubsub.updateArray(todos, update);
// `todos` is now up to date with the latest publishes from the server.
},
(err) => alert(err),
(count) => {
// If you provide this callback, the server will send updates of how many
// clients are subscribed to this query.
userCount = count;
},
);
// ...
// Remember to clean up your subscriptions when you no longer need them.
subscription.unsubscribe();
Copyright 2021-2025 SciActive Inc
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
FAQs
Nymph.js - Client
The npm package @nymphjs/client receives a total of 143 weekly downloads. As such, @nymphjs/client popularity was classified as not popular.
We found that @nymphjs/client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.