Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
To alter. Altered; Changed.
If you're in a hurry show me the code or tl;dr.
Alt is a flux where some bits have been intentionally left out. Which bits? The JS "constants", the static string tossing, and the massive switch statements you're required to code.
Alt is pure flux though. Data flows one way. Here's an ascii chart to prove it.
╔═══════════════╗ ╔══════════════╗ ╔════════════╗
║ Actions ║ ═══════> ║ Stores ║ ═══════> ║ View ║
╚═══════════════╝ ╚══════════════╝ ╚════════════╝
▲ ║
║ ║
╚════════════════════════════════════════════════════════╝
For those new to Flux in general here's a short overview: Flux eschews MVC in favor of unidirectional data flow. What this means is that data enters through your actions which are then sent to the stores whose responsibility is to manage state and dependencies of that state, and then finally the store informs the view via event listeners so the view can update. The view then triggers more actions via user input and the flow restarts.
Alt is a terse implementation of Flux that encourages unadulterated flux and all the nice ideas that come along with it:
The Flux dispatcher, which
means one can only dispatch one action per cycle to ensure a predictable and simple data flow (rather than cascading actions).
The waitFor
method is also available to help you marshall callback order.
Extends from an event emitter, in our case EventEmitter3, so one can set up the view to listen to changes on the store.
Singleton stores making your store logic simple to follow and easy to test.
Single dispatcher which allows one to listen to all events for debugging or fun.
Where alt is a tad different from flux.
There is no giant switch statement you have to write in your store and this is because alt removes the burden of constants from the developer. This has the wonderful side effect of making the custom dispatcher logic unnecessary, thus removing one of the boxes from the flow chart (not pictured above) the dispatcher. Make no mistake, there is still a single dispatcher through which actions flow through on their merry way to the store, in fact, you still get the benefit of being able to hook into the dispatcher to listen to all the global events for debugging, fun, or misery. The dispatcher is just a part of alt and something you don't necessarily have to write custom code for.
These removals make the code terse and easy to follow, there is less indirection and the learning curve to grok is much lower. Think I'm lying? Check out an example.
What's new.
One really cool aspect of alt is that you can save snapshots of the entire application's state at any given point in time. Best of all, if you really screw the state up beyond repair you can easily rollback to the last saved snapshot.
There's also a method available that lets you bootstrap all the application's stores once, at startup, with a saved snapshot. This is particularly useful if you're writing isomorphic applications where you can send down a snapshot of the state the server was in, then bootstrap it back on the client and continue working where the program left off.
Stores are immutable. Meaning you can't just update the store through your store instance, the objects returned by getState
are immutable (well you can mutate them all you want but it won't affect the state inside the store), and other stores can't mutate other stores. This makes it easy to reason about how your application exactly changes and where.
Last but not least, alt is meant to work with ES6. That is we're betting you'll be writing your stores and actions as classes. This part isn't necessary but you really should write some ES6 anyways because it's nice.
npm install alt
Check out the repo and then:
npm test
We'll be referring back to this code a lot by using the alt
variable declared.
var Alt = require('alt')
var alt = new Alt()
Alt depends on ES5 features, the good news is so does React. You can use es5-shim to support those pesky old browsers.
Alt encourages ES6 features, the good news is it's pleasant to write. You can use the es6 transpiler that comes with react courtesy of jstransform or you can use your own favorite ES6 transpiler: 6to5, es-next, or any es6 transpiler you fancy.
You won't need an es6-shim but you can use one for further goodies in your javascripts.
Actions are the way you update state. They're kind of a big deal.
alt.createActions :: Class -> Actions
class LocationActions {
updateLocation() {
this.dispatch('Paris')
}
}
var locationActions = alt.createActions(LocationActions)
Every action contains a dispatch
method which is what sends your data to the dispatcher for dispatching to stores. The type signature for dispatch is dispatch :: x -> undefined
.
alt.createActions
then returns an Object
containing all the methods defined. You can then call your actions directly.
locationActions.updateLocation()
You can also define actions that take a parameter like so
class LocationActions {
updateLocation(x) {
this.dispatch(x)
}
}
var locationActions = alt.createActions(LocationActions)
locationActions.updateLocation('San Francisco')
Writing out actions that pass data through directly can get quite tedious so there's a shorthand for writing these what are essentially identity
functions
class LocationActions {
constructor() {
// for single action
this.generateActions('updateLocation')
// as well as for many actions
this.generateActions('updateCity', 'updateState', 'updateCountry')
}
}
var locationActions = alt.createActions(LocationActions)
locationActions.updateLocation('Las Vegas')
locationActions.updateCity('Las Vegas')
locationActions.updateState('Nevada')
locationActions.updateCountry('US')
Remember, dispatch
only takes one argument. Therefore, if you need to pass multiple arguments into a store you can use an Object.
class LocationActions {
updateLocation(x, y) {
this.dispatch({ x, y })
}
}
var locationActions = alt.createActions(LocationActions)
locationActions.updateLocation('Miami', 'Florida')
An shorthand function created in the constructor will pass through the multiple parameters as an Array
class LocationActions {
constructor() {
this.generateActions('updateLocation') // ['South Lake Tahoe, 'California']
}
}
var locationActions = alt.createActions(LocationActions)
locationActions.updateLocation('South Lake Tahoe', 'California')
Stores are where you keep a part of your application's state. It's a singleton, holds your data, and is immutable.
alt.createStore :: Class -> Store
class LocationStore {
constructor() {
this.bindAction(locationActions.updateLocation, this.onUpdateLocation)
this.city = 'Denver'
this.state = 'Colorado'
}
onUpdateLocation(obj) {
var { city, state } = obj
this.city = city
this.state = state
}
}
var locationStore = alt.createStore(LocationStore)
Stores require a constructor, that's where you'll set your initial state and bind any actions to the methods that update the state, the action handlers
if you will. All store instances returned by alt.createStore
will have the following methods:
listen
is meant to be used by your View components in order to await changes made to each store.
locationStore.listen((data) => {
console.log(data)
})
unlisten
is a clean up method. It takes in the same function you used for listen
and unregisters it.
getState
will return a copy of your the current store's state.
locationStore.getState().city === 'Denver'
A token that can be used with waitFor.
All defined methods in your Store class will not be available on the store instance. They are accessible within the class but not on the returned
Object via alt.createStore
. This ensures that stores have no direct setters and the state remains mutable only through actions keeping the flow unidirectional.
If you want to attach public/static functions to your store you may do so as a static method on the class itself.
class LocationStore {
static myPublicMethod() {
var internalInstanceState = this.getState()
return internalInstanceState
}
}
var locationStore = alt.createStore(LocationStore)
locationStore.myPublicMethod()
If you don't want the store to inform the view of an action make sure to return false from the action handler methods, alt won't judge you.
class LocationStore {
constructor() {
this.bindAction(locationActions.updateCity, this.onUpdateCity)
this.city = 'Portland'
this.state = 'Oregon'
}
onUpdateCity(city) {
this.city = city
// ensure the view never finds out
return false
}
}
var locationStore = alt.createStore(LocationStore)
I thought you said there were no constants? Well, yeah, sort of. The thing is, they're automagically created for you. Feel free to use them to bind your actions or use the method itself, whatever reads better in your opinion.
class LocationStore {
constructor() {
this.bindAction(locationActions.UPDATE_STATE, this.onUpdateState)
this.city = ''
this.state = ''
}
}
var locationStore = alt.createStore(LocationStore)
Constants are automagically generated for you so feel free to use them to bind your actions or use the method itself, whatever reads better in your opinion.
In the rare very common case of binding multiple actions, calling bindAction
with each
handler is not anyone's idea of fun.
class LocationActions {
constructor() {
this.generateActions('updateCity', 'updateState')
}
}
var locationActions = alt.createActions(LocationActions)
You can bind all the actions inside locationActions
using the shortcut bindActions
class LocationStore {
constructor() {
this.bindActions(locationActions)
this.city = 'Austin'
this.state = 'Texas'
}
onUpdateCity(city) {
this.city = city
}
onUpdateState(state) {
this.state = state
}
}
var locationStore = alt.createStore(LocationStore)
Actions who have a onCamelCasedAction
method or an actionName
method available in the store will be bound.
Thus brings us to our final store point. Stores have the following available methods internally:
bindAction :: ActionsMethod, StoreMethod -> undefined
bindActions :: Actions
waitFor :: DispatcherToken | [DispatcherTokens]
waitFor
is mostly an alias to Flux's Dispatcher waitFor. Here's an excerpt from the flux docs on what waitFor is designed for:
As an application grows, dependencies across different stores are a near certainty. Store A will inevitably need Store B to update itself first, so that Store A can know how to update itself. We need the dispatcher to be able to invoke the callback for Store B, and finish that callback, before moving forward with Store A. To declaratively assert this dependency, a store needs to be able to say to the dispatcher, "I need to wait for Store B to finish processing this action." The dispatcher provides this functionality through its waitFor() method.
You can use waitFor like so:
var dependingStore = alt.createStore(class DependingStore {
constructor() {
this.bindActions(someActions)
this.data = 42
}
onRandom(x) {
this.data = x
}
})
var locationStore = alt.createStore(class LocationStore {
constructor() {
this.bindActions(someOtherActions)
this.syncedData = Date.now()
}
onThings() {
this.waitFor(dependingStore.dispatchToken)
this.syncedData = dependingStore.getState().data
}
})
You can also waitFor
multiple stores by passing in an Array: this.waitFor([store1.dispatchToken, store2.dispatchToken])
Your choice of view isn't important to alt. What's important is to know how the view consumes the store's data, and that is via event listeners.
In this example I'll be using React, but you're free to use your library of choice.
var LocationComponent = React.createClass({
getInitialState() {
return locationStore.getState()
},
componentWillMount() {
locationStore.listen(this.onChange)
},
componentWillUnmount() {
locationStore.unlisten(this.onChange)
},
onChange() {
this.setState(this.getInitialState())
},
render() {
return (
<div>
<p>
City {this.state.city}
</p>
<p>
State {this.state.state}
</p>
</div>
)
}
})
Alt provides a free ListenerMixin
for React so you don't have to remember to unregister your listener. You can use said mixin like this:
var ListenerMixin = require('alt/ListenerMixin')
var LocationComponent = React.createClass({
mixins: [ListenerMixin],
getInitialState() {
return locationStore.getState()
},
componentWillMount() {
this.listenTo(locationStore, this.onChange)
},
onChange() {
this.setState(this.getInitialState())
},
render() {
return (
<div>
<p>
City {this.state.city}
</p>
<p>
State {this.state.state}
</p>
</div>
)
}
})
Restart the loop by making your views kick off new actions.
takeSnapshot :: String
Snapshots are a core component of alt. The idea is that at any given point in time you can takeSnapshot
and have your entire application's state
serialized for persistence, transfering, logging, or debugging.
Taking a snapshot is as easy as calling alt.takeSnapshot()
.
bootstrap :: String -> undefined
Bootstrapping can only be done once, and usually is best to do when initializing your application. The alt.bootstrap()
function takes in a snapshot
you've saved and reloads all the state with that snapshot, no events will be emitted to your components during this process, so again, it's best to do this
on init before the view has even rendered.
Bootstrap is great if you're running an isomorphic app, or if you're persisting state to localstorage and then retrieving it on init later on. You can save a snapshot on the server side, send it down, and then bootstrap it back on the client.
rollback :: undefined
If you've screwed up the state, or you just feel like rolling back you can call alt.rollback()
. Rollback is pretty dumb in the sense
that it's not automatic in case of errors, and it only rolls back to the last saved snapshot, meaning you have to save a snapshot first in order to roll back.
When bootstrapping or snapshotting there are special methods you can assign to your store to ensure any bookeeping that needs to be done.
onBootstrap()
is a method which is called after the store has been bootstrapped. Here you can add some logic to take your bootstrapped data and manipulate it.
onTakeSnapshot()
is a method which is called before the store's state is serialized. Here you can perform any final tasks you need to before the state is saved.
A single dispatcher instance is made available for listening to all events passing through. You can access this via the dispatcher
property: alt.dispatcher
and listening to all events is as easy as
alt.dispatcher.register(console.log)
Flux has constants, the dispatcher is also pretty dumb as in it just takes what you passed in the action and pipes it through to the store. This is completely fine but not something you should be expected to write. The nice thing about constants is that you can easily grep for them in your application and see where all the actions are being called, with alt you get the same benefit without having to manage them.
var action = {
foo() {
AppDispatcher.handleAction({ type: actionConstants.HANDLE_ACTION, data: 'foo' })
}
}
var AppDispatcher = Object.assign(new Dispatcher(), {
handleAction(payload) {
this.dispatch(payload)
}
})
class Action {
handleAction() {
this.dispatch('foo')
}
}
var action = alt.createActions(Action)
Reflux is a fun to work with and terse "flux implementation". It's not actually flux, but it's still a pleasure to use. Alt brings the terseness of reflux to actual flux.
Fluxxor is a neat implementation of flux with good documentation and examples.
...others there are actually plenty of flux implementations.
FAQs
A flux implementation
The npm package alt receives a total of 10,293 weekly downloads. As such, alt popularity was classified as popular.
We found that alt demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.