
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@open-tender/redux
Advanced tools
A set of reducers, actions, and action creators for managing state in Open Tender apps
A set of reducers, actions, action creators, and selectors for use with the Open Tender open source apps:
This library is only relevant for restaurant brands that are customers of Open Tender. To learn more about establishing an Open Tender account, please visit our website.
Install via yarn:
yarn add @open-tender/redux
Or via npm:
npm install --save @open-tender/redux
This library handles most of the state management for the Open Tender apps listed above, as well as all of the interactions with the Open Tender API.
It provides a number of Redux reducers, actions, async action creators, and selectors that are used extensively throughout the Open Tender apps. All of the state that comes from this library lives under the data attribute of the Redux store (see store.js for details). This includes over 40 reducers as of July 2021. See the reducers directory for the details of each of these reducers or just check out the state using the Redux dev tools.
This library also includes an OpenTenderAPI class that handles requests to all of the relevant endpoints of the Open Tender Order API (used in the open-tender-web app) and the POS API (used in the open-tender-pos and open-tender-kds apps). You can see all of the available methods here.
When an Open Tender app initially loads, it creates an API instance using this OpenTenderAPI class and stores it in the state of the app for future use by the app and this library. The api instance can be used in the app itself via the selectApi selector, such as:
const api = useSelector(selectApi)
However, you don't typically need to do this - most of the requests are handled for you by this library per the example below.
To fetch a list of restaurant locations (we can them "revenue centers" in Open Tender), you would simply dispatch an action like so:
dispatch(fetchRevenueCenters({ type: 'OLO' }))
This will make a request to the Open Tender API to retrieve the restaurants of the OLO type for your brand and then load the response into the data.revenueCenters reducer, which looks like this:
{
revenueCenters: [],
loading: 'idle',
error: null,
}
You can then use the selectRevenueCenters selector to use the fetched revenue centers in your component like this:
const { revenueCenters, loading, error } = useSelector(selectRevenueCenters)
The best way to get to know this library is to start working with one of the Open Tender open source apps - it's used so extensively that it will be hard to miss it!
If you find a bug or have a question, please file an issue on our issue tracker on GitHub.
Built and maintained by Open Tender.
FAQs
A set of reducers, actions, and action creators for managing state in Open Tender apps
We found that @open-tender/redux demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.