
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@peter.naydenov/batch-runner
Advanced tools
Execute a batch job with a simple call. Batch itself contains a name, source of data and a job to be executed. Batch runner will execute the job for each item in the source.
Source is a function that returns an array of items. Source function will be executed on each job run request so the source can be dynamic. Each item will be passed to the job function.
In job run request you can provide extra data parameters that will be passed to the job function as well after the item from the source.
Library batch-runner is a framework agnostic. No dependencies.
Here is how to install the library:
npm i @peter.naydenov/batch-runner
Library has only two methods:
define : 'define a batch'
, run : 'run a batch'
batch.define ( {
name : 'string. Name of the batch'
, source : 'function(optional). Should return a source of data for the job'
, job : 'job to be executed'
, final : 'final refinement of the results ( after version 2.4.0 )'
Simplified example:
import batchRunner from '@peter.naydenov/batch-runner'
const batch = batchRunner(); // Creates a batch repository
batch.define ({
name : 'myBatch'
, source : () => [1, 2, 3]
, job : ({item,i,END},x) => console.log(`${item},${x}`)
});
batch.run ( 'myBatch', 'extra' ) // Extra parameter will be passed to the job function
// -> 1,extra
// -> 2,extra
// -> 3,extra
// Number of extra parameters is not limited
Job definition first argument is an object {item,i,END}, where item is the current item, i is the current source index, END is constant. To stop further function evocation return the END constant.
Example:
batch.define ({
name : 'myBatch'
, source : () => [ 1, 2, 3, 4, 5, 6, 7, 8, 9, 10 ]
, job : ({item,i,END},x) => {
return ( i < 2 ) ? item : END
}
});
let r = batch.run ( 'myBatch' )
// r -> [1,2]
Job always returns an array of results. You can change that by specifying the final function.
batch.define ({
name : 'myBatch'
, source : () => [ 1, 2, 3, 4, 5, 6, 7, 8, 9, 10 ]
, job : ({item,i,END},x) => {
return ( i < 2 ) ? item : END
}
, final : ( result ) => result.reduce ( (acc,item) => acc = acc + item, 0 ) // result argument is [1,2]
// convert array to sum of its items
});
let r = batch.run ( 'myBatch' )
// r -> 3
'@peter.naydenov/batch-runner' was created and supported by Peter Naydenov.
'@peter.naydenov/batch-runner' is released under the MIT License.
FAQs
Execute a batch job with a simple call
We found that @peter.naydenov/batch-runner demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.