
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
alooper stands for Array Looper, and it loops array items after each callback in a rather straightforward way.
npm i --save alooper
const alooper = require('alooper')
let foo = [1, 2, 3, 4]
function someProcess(x, done) {
setTimeout(() => {
done(x + 1)
}, 1000)
}
let looper = alooper.create(
// the data to be processed
foo,
// the function to process each item
d => {
console.log('processing foo', d)
someProcess(d, r => {
console.log(r)
// after processed one item, trigger next
looper.next()
})
},
// the function to call after all items are processed
() => {
console.log('foo is processed')
}
)
outputs
processing foo 1
2
processing foo 2
3
processing foo 3
4
processing foo 4
5
foo is processed
const alooper = require('alooper')
let bar = { a: 100, b: 200, c: 300, d: 400 }
function someProcess(x, done) {
setTimeout(() => {
done(x + 1)
}, 1000)
}
let looper2 = alooper.create(
bar,
(d, k) => {
console.log('processing bar', k, d)
someProcess(d, r => {
console.log(r)
looper2.next()
})
},
() => {
console.log('bar is processed')
}
)
outputs
processing bar a 100
101
processing bar b 200
201
processing bar c 300
301
processing bar d 400
401
bar is processed
FAQs
Loops array items after each callback in a rather straightforward way
We found that alooper demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.