Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
@schibstedpl/circuit-breaker-js
Advanced tools
Hystrix-like circuit breaker for JavaScript.
This fork removes the usage of setInterval() from the code completely, preventing hangs when use in Node.js contexts.
var breaker = new CircuitBreaker();
var command = function(success, failed) {
restCall()
.done(success)
.fail(failed);
};
var fallback = function() {
alert("Service is down");
};
breaker.run(command, fallback);
Create a new instance of a circuit breaker. Accepts the following config options:
Duration of statistical rolling window in milliseconds. This is how long metrics are kept for the circuit breaker to use and for publishing.
The window is broken into buckets and "roll" by those increments.
Default Value: 10000
Number of buckets the rolling statistical window is broken into.
Default Value: 10
Time in milliseconds after which a command will timeout.
Default Value: 3000
Error percentage at which the circuit should trip open and start short-circuiting requests to fallback logic.
Default Value: 50
Minimum number of requests in rolling window needed before tripping the circuit will occur.
For example, if the value is 20, then if only 19 requests are received in the rolling window (say 10 seconds) the circuit will not trip open even if all 19 failed.
Default Value: 5
Function that is run whenever the circuit is opened (i.e. the threshold is reached). Receives the metrics for the current window as an argument.
Default Value: no-op
Function that is run whenever the circuit is closed (i.e. the service is back up). Receives the metrics for the current window as an argument.
Default Value: no-op
Runs a command if circuit is closed, otherwise defaults to a fallback if provided. The command is called with success and failure handlers which you need to call at the appropriate point in your command. For example, if an ajax request succeeds the the success function should be called to notify the breaker. If neither success or failed are called then the command it's assumed the command timed out.
Checks whether the breaker is currently accepting requests.
Forces the circuit to open.
Metrics will not be collected while the circuit is forced.
Forces the circuit to close.
Metrics will not be collected while the circuit is forced.
Returns the circuit to its last unforced state.
Install the dependencies
npm install
Run the tests with:
grunt test
or
grunt test:browser
FAQs
Hystrix-like circuit breaker for JavaScript.
We found that @schibstedpl/circuit-breaker-js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.