Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@types/bluebird
Advanced tools
TypeScript definitions for bluebird
The @types/bluebird package provides TypeScript type definitions for Bluebird, a powerful, full-featured Promise library that focuses on innovative features and performance. These type definitions allow TypeScript developers to use Bluebird in their projects with the benefits of type checking and IntelliSense support in their code editors.
Promise creation and usage
This feature demonstrates how to create a new Promise using Bluebird and handle its resolution with the `then` method.
import * as Bluebird from 'bluebird';
const promise = new Bluebird((resolve, reject) => {
resolve('Success!');
});
promise.then((result) => {
console.log(result);
});
Promise chaining
This feature shows how to chain multiple operations on a Promise, transforming its value step by step.
import * as Bluebird from 'bluebird';
Bluebird.resolve(1)
.then((result) => result + 1)
.then((result) => result * 2)
.then((result) => console.log(result)); // Outputs: 4
Error handling
This feature illustrates how to handle errors in Promise operations using the `catch` method, specifically catching instances of the Error class.
import * as Bluebird from 'bluebird';
Bluebird.reject(new Error('Failed'))
.catch(Error, (error) => {
console.error(error.message);
});
Q is a library for creating and managing promises in JavaScript. It's similar to Bluebird but differs in its API and performance characteristics. Bluebird is generally considered to have better performance and more features.
The es6-promise package is a polyfill for the ES6 Promise specification. It provides basic Promise functionality but lacks the advanced features and performance optimizations found in Bluebird.
This package is a simple implementation of Promises. It is lightweight and straightforward but does not offer the extensive feature set or the performance optimizations of Bluebird.
npm install --save @types/bluebird
This package contains type definitions for bluebird (https://github.com/petkaantonov/bluebird).
Files were exported from https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/bluebird.
These definitions were written by Leonard Hecker.
FAQs
TypeScript definitions for bluebird
The npm package @types/bluebird receives a total of 1,076,570 weekly downloads. As such, @types/bluebird popularity was classified as popular.
We found that @types/bluebird demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.