
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
@openmessage/qstream
Advanced tools
Topic-Based Messaging Queue on top of Redis Streams
const streams = require('@openmessage/qstream')();
streams.publish('your-topic', data);
see more at examples
const streams = require('@openmessage/qstream')();
const group = await streams.group('your-topic', 'group/queue name');
group.consume(async (data) => {
console.log({ data });
return true;
});
see more at examples
const QStream = require('@openmessage/qstream');
const qstream = QStream(redisUrl);
redisUrl: Valid Redis URL format
qstream.publish('your-topic', data);
data: can be any valid javascript object, primitive values not supported
With extra args, like maxLen, that will cap the stream to the specified length:
qstream.publish('your-topic', data, 10);
Or approximated maxLen:
qstream.publish('your-topic', data, '~10');
By default streams will be capped to aprox 10000 (MAXLEN ~ 10000). If you don't want your stream to be capped, you have to explicitly set the last arg of publish to null
.
const group = await streams.group('your-topic', 'consumer-group/queue-name');
Consumers in the same consumer group will load balance jobs among them
group.consume(async (data) => {
console.log({ data });
return true;
});
The function passed to the consume method can be a promise
group.consume(console.log, 10);
as a second parameter to the consume function it receives the number of concurrent jobs, defaults to 1
This lib uses debug to debug the processing
DEBUG=qstream:* npm start
FAQs
Topic-Based Messaging Queue on top of Redis Streams
The npm package @openmessage/qstream receives a total of 3 weekly downloads. As such, @openmessage/qstream popularity was classified as not popular.
We found that @openmessage/qstream demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.