Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@stardazed/streams
Advanced tools
This library provides a full implementation of the web streams standard. It has no dependencies and can be used as a streams testing bed or polyfill in browsers without (full) support for the streams standard.
It also provides a full set of TypeScript types for the library as an improvement over the incomplete typings in the TS standard library.
While the full streams API is implemented, because it is written as a client library
it cannot directly be used with other built-in APIs, such as calling getReader
on the
body
of a fetch
call, that may either not be implemented at all or return a browser
internal ReadableStream
. Due to implementation details of streams, you cannot mix and
match the types in this implementation with those provided by the browser.
In addition, while the BYOB variant of ReadableStream
is implemented, buffers are copied
and not transferred as no browser has implemented detached buffers yet, let alone exposed
them to client-level code.
⚠️ Important: This package is distributed as an ES2015 module and is intended for use in browsers, not in NodeJS per se. Browser-specific types may be used.
npm install @stardazed/streams
pnpm install @stardazed/streams
yarn add @stardazed/streams
See the Web Streams Standard Specification for documentation, examples, etc.
© 2018 by Arthur Langereis - @zenmumbler
MIT
FAQs
Web Streams implementation
The npm package @stardazed/streams receives a total of 179 weekly downloads. As such, @stardazed/streams popularity was classified as not popular.
We found that @stardazed/streams demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.