Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@reactivex/rxjs
Advanced tools
Reactive Extensions Library for JavaScript. This is a rewrite of Reactive-Extensions/RxJS and is intended to supersede it once this is ready. This rewrite is meant to have better performance, better modularity, better debuggable call stacks, while staying mostly backwards compatible, with some breaking changes that reduce the API surface.
By contributing or commenting on issues in this repository, whether you've read them or not, you're agreeing to the Contributor Code of Conduct. Much like traffic laws, ignorance doesn't grant you immunity.
To install this library via npm, use the following command:
npm install @reactivex/rxjs
var Rx = require('@reactivex/rxjs');
Rx.Observable.of('hello world')
.subscribe(function(x) { console.log(x); });
The build and test structure is fairly primitive at the moment. There are various npm scripts that can be run:
src/
to dist/es6
dist/es6
to dist/cjs
dist/es6
to dist/amd
dist/cjs
to dist/global/Rx.js
jasmine
protractor
dist/es6
to dist/docs
istanbul
code coverage against test casesjasmine
, must have built prior to running.# build all the things!
npm run build_all
Run npm run build_perf
or npm run perf
to run the performance tests with protractor
.
Run npm run perf_micro
to run micro performance test benchmarking operator.
RxNext uses ESDoc to generate API documentation. Refer to ESDoc's documentation for syntax. Run npm run build_docs
to generate.
FAQs
Reactive Extensions for modern JavaScript
The npm package @reactivex/rxjs receives a total of 13,132 weekly downloads. As such, @reactivex/rxjs popularity was classified as popular.
We found that @reactivex/rxjs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.