Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
To alter. Altered; Changed.
If you're in a hurry show me the code or tl;dr.
Alt is a flux implementation that is small (~4.3kb & 400 LOC), well tested, terse, insanely flexible, and forward thinking.
Some boilerplate has been removed from flux such as the JS "constants", the static string tossing, and the massive switch statements you're required to code.
Alt is pure flux though. Data flows one way. Here's an ascii chart to prove it.
╔═══════════════╗ ╔══════════════╗ ╔════════════╗
║ Actions ║ ═══════> ║ Stores ║ ═══════> ║ View ║
╚═══════════════╝ ╚══════════════╝ ╚════════════╝
▲ ║
║ ║
╚════════════════════════════════════════════════════════╝
For those new to Flux in general here's a short overview: Flux eschews MVC in favor of unidirectional data flow. What this means is that data enters through your actions which are then sent to the stores whose responsibility is to manage state and dependencies of that state, and then finally the store informs the view via event listeners so the view can update. The view then triggers more actions via user input and the flow restarts.
Alt is a terse implementation of Flux that encourages unadulterated flux and all the nice ideas that come along with it:
The Flux dispatcher, which
means one can only dispatch one action per cycle to ensure a predictable and simple data flow (rather than cascading actions).
The waitFor
method is also available to help you marshall callback order.
Store uses an event emitter, in our case EventEmitter3, so one can set up the view to listen to changes on the store.
Singleton stores making your store logic simple to follow and easy to test.
Single dispatcher which allows one to listen to all events for debugging or fun.
Some boilerplate has been removed from flux.
There is no giant switch statement you have to write in your store and this is because alt removes the burden of constants from the developer. This has the wonderful side effect of making the custom dispatcher logic unnecessary, thus removing one of the boxes from the flow chart (not pictured above) the dispatcher.
Make no mistake, there is still a single dispatcher through which actions flow through on their merry way to the store, in fact, you still get the benefit of being able to hook into the dispatcher to listen to all the global events for debugging, fun, or misery. The dispatcher is just a part of alt and something you don't necessarily have to write custom code for.
These removals make the code terse and easy to follow, there is less indirection and the learning curve to grok is much lower. Think I'm lying? Check out an example.
What's new.
One really cool aspect of alt is that you can save snapshots of the entire application's state at any given point in time. Best of all, if you really screw the state up beyond repair you can easily rollback to the last saved snapshot.
There's also a method available that lets you bootstrap all the application's stores once, at startup, with a saved snapshot. This is particularly useful if you're writing isomorphic applications where you can send down a snapshot of the state the server was in, then bootstrap it back on the client and continue working where the program left off.
Stores are immutable. Meaning you can't just update the store through your store instance, the objects returned by getState
are immutable (well you can mutate them all you want but it won't affect the state inside the store), and other stores can't mutate other stores. This makes it easy to reason about how your application exactly changes and where.
Last but not least, alt is meant to work with ES6. That is we're betting you'll be writing your stores and actions as classes. This part isn't necessary but you really should write some ES6 anyways because it's nice.
npm install alt
Check out the repo and then:
npm test
We'll be referring back to this code a lot by using the alt
variable declared.
var Alt = require('alt')
var alt = new Alt()
Alt is written in, and encourages ES6. It is completely optional but it is pleasant to write.
You can use the es6 transpiler that comes with react courtesy of jstransform or you can use one of the other popular ES6 transpilers: babel or traceur.
You won't need an es6-shim but you can use one for further goodies in your javascripts.
Alt does depend on ES5 features, the good news is so does React. You can use es5-shim to support those pesky old browsers.
Actions are the way you update state. They're kind of a big deal.
alt.createActions :: Class -> Actions
class LocationActions {
updateLocation() {
this.dispatch('Paris')
}
}
var locationActions = alt.createActions(LocationActions)
Every action contains a dispatch
method which is what sends your data to the dispatcher for dispatching to stores. The type signature for dispatch is dispatch :: x -> undefined
.
alt.createActions
then returns an Object
containing all the methods defined. You can then call your actions directly.
locationActions.updateLocation()
You can also define actions that take a parameter like so
class LocationActions {
updateLocation(x) {
this.dispatch(x)
}
}
var locationActions = alt.createActions(LocationActions)
locationActions.updateLocation('San Francisco')
Writing out actions that pass data through directly can get quite tedious so there's a shorthand for writing these what are essentially identity
functions
class LocationActions {
constructor() {
// for single action
this.generateActions('updateLocation')
// as well as for many actions
this.generateActions('updateCity', 'updateState', 'updateCountry')
}
}
var locationActions = alt.createActions(LocationActions)
locationActions.updateLocation('Las Vegas')
locationActions.updateCity('Las Vegas')
locationActions.updateState('Nevada')
locationActions.updateCountry('US')
Remember, dispatch
only takes one argument. Therefore, if you need to pass multiple arguments into a store you can use an Object.
class LocationActions {
updateLocation(x, y) {
this.dispatch({ x, y })
}
}
var locationActions = alt.createActions(LocationActions)
locationActions.updateLocation('Miami', 'Florida')
An shorthand function created in the constructor will pass through the multiple parameters as an Array
class LocationActions {
constructor() {
this.generateActions('updateLocation') // ['South Lake Tahoe, 'California']
}
}
var locationActions = alt.createActions(LocationActions)
locationActions.updateLocation('South Lake Tahoe', 'California')
Stores are where you keep a part of your application's state. It's a singleton, holds your data, and is immutable.
alt.createStore :: Class, String -> Store
class LocationStore {
constructor() {
this.bindAction(locationActions.updateLocation, this.onUpdateLocation)
this.city = 'Denver'
this.state = 'Colorado'
}
onUpdateLocation(obj) {
var { city, state } = obj
this.city = city
this.state = state
}
}
var locationStore = alt.createStore(LocationStore)
Stores require a constructor, that's where you'll set your initial state and bind any actions to the methods that update the state, the action handlers
if you will. All store instances returned by alt.createStore
will have the following methods:
listen
is meant to be used by your View components in order to await changes made to each store.
locationStore.listen((data) => {
console.log(data)
})
unlisten
is a clean up method. It takes in the same function you used for listen
and unregisters it.
getState
will return a copy of your the current store's state.
locationStore.getState().city === 'Denver'
A token that can be used with waitFor.
All defined methods in your Store class will not be available on the store instance. They are accessible within the class but not on the returned
Object via alt.createStore
. This ensures that stores have no direct setters and the state remains mutable only through actions keeping the flow unidirectional.
If you want to attach public/static functions to your store you may do so as a static method on the class itself.
class LocationStore {
static myPublicMethod() {
var internalInstanceState = this.getState()
return internalInstanceState
}
}
var locationStore = alt.createStore(LocationStore)
locationStore.myPublicMethod()
If you don't want the store to inform the view of an action make sure to return false from the action handler methods, alt won't judge you.
class LocationStore {
constructor() {
this.bindAction(locationActions.updateCity, this.onUpdateCity)
this.city = 'Portland'
this.state = 'Oregon'
}
onUpdateCity(city) {
this.city = city
// ensure the view never finds out
return false
}
}
var locationStore = alt.createStore(LocationStore)
I thought you said there were no constants? Well, yeah, sort of. The thing is, they're automagically created for you. Feel free to use them to bind your actions or use the method itself, whatever reads better in your opinion.
class LocationStore {
constructor() {
this.bindAction(locationActions.UPDATE_STATE, this.onUpdateState)
this.city = ''
this.state = ''
}
}
var locationStore = alt.createStore(LocationStore)
Constants are automagically generated for you so feel free to use them to bind your actions or use the method itself, whatever reads better in your opinion.
In the rare very common case of binding multiple actions, calling bindAction
with each
handler is not anyone's idea of fun.
class LocationActions {
constructor() {
this.generateActions('updateCity', 'updateState')
}
}
var locationActions = alt.createActions(LocationActions)
You can bind all the actions inside locationActions
using the shortcut bindActions
class LocationStore {
constructor() {
this.bindActions(locationActions)
this.city = 'Austin'
this.state = 'Texas'
}
onUpdateCity(city) {
this.city = city
}
onUpdateState(state) {
this.state = state
}
}
var locationStore = alt.createStore(LocationStore)
Actions who have a onCamelCasedAction
method or an actionName
method available in the store will be bound.
Thus brings us to our final store point. Stores have the following available methods internally:
on :: lifecycleMethod, handler -> undefined
bindAction :: ActionsMethod, StoreMethod -> undefined
bindActions :: Actions -> undefined
waitFor :: DispatcherToken | [DispatcherTokens] -> undefined
waitFor
is mostly an alias to Flux's Dispatcher waitFor. Here's an excerpt from the flux docs on what waitFor is designed for:
As an application grows, dependencies across different stores are a near certainty. Store A will inevitably need Store B to update itself first, so that Store A can know how to update itself. We need the dispatcher to be able to invoke the callback for Store B, and finish that callback, before moving forward with Store A. To declaratively assert this dependency, a store needs to be able to say to the dispatcher, "I need to wait for Store B to finish processing this action." The dispatcher provides this functionality through its waitFor() method.
You can use waitFor like so:
var dependingStore = alt.createStore(class DependingStore {
constructor() {
this.bindActions(someActions)
this.data = 42
}
onRandom(x) {
this.data = x
}
})
var locationStore = alt.createStore(class LocationStore {
constructor() {
this.bindActions(someOtherActions)
this.syncedData = Date.now()
}
onThings() {
this.waitFor(dependingStore.dispatchToken)
this.syncedData = dependingStore.getState().data
}
})
You can also waitFor
multiple stores by passing in an Array: this.waitFor([store1.dispatchToken, store2.dispatchToken])
Your choice of view isn't important to alt. What's important is to know how the view consumes the store's data, and that is via event listeners.
In this example I'll be using React, but you're free to use your library of choice.
var LocationComponent = React.createClass({
getInitialState() {
return locationStore.getState()
},
componentWillMount() {
locationStore.listen(this.onChange)
},
componentWillUnmount() {
locationStore.unlisten(this.onChange)
},
onChange() {
this.setState(this.getInitialState())
},
render() {
return (
<div>
<p>
City {this.state.city}
</p>
<p>
State {this.state.state}
</p>
</div>
)
}
})
Alt provides a free ListenerMixin
for React so you don't have to remember to unregister your listener. You can use said mixin like this:
var ListenerMixin = require('alt/mixins/ListenerMixin')
var LocationComponent = React.createClass({
mixins: [ListenerMixin],
getInitialState() {
return locationStore.getState()
},
componentWillMount() {
this.listenTo(locationStore, this.onChange)
},
onChange() {
this.setState(this.getInitialState())
},
render() {
return (
<div>
<p>
City {this.state.city}
</p>
<p>
State {this.state.state}
</p>
</div>
)
}
})
Restart the loop by making your views kick off new actions.
takeSnapshot :: String
Snapshots are a core component of alt. The idea is that at any given point in time you can takeSnapshot
and have your entire application's state
serialized for persistence, transfering, logging, or debugging.
Taking a snapshot is as easy as calling alt.takeSnapshot()
.
bootstrap :: String -> undefined
Bootstrapping can only be done once, and usually is best to do when initializing your application. The alt.bootstrap()
function takes in a snapshot
you've saved and reloads all the state with that snapshot, no events will be emitted to your components during this process, so again, it's best to do this
on init before the view has even rendered.
Bootstrap is great if you're running an isomorphic app, or if you're persisting state to localstorage and then retrieving it on init later on. You can save a snapshot on the server side, send it down, and then bootstrap it back on the client.
If you're bootstrapping then it is recommended you pass in a unique Identifier, name of the class is good enough, to createStore so that it can be referenced later for bootstrapping.
alt.createStore(LocationStore, 'LocationStore')
rollback :: undefined
If you've screwed up the state, or you just feel like rolling back you can call alt.rollback()
. Rollback is pretty dumb in the sense
that it's not automatic in case of errors, and it only rolls back to the last saved snapshot, meaning you have to save a snapshot first in order to roll back.
flush :: String
Flush takes a snapshot of the current state and then resets all the stores back to their original initial state. This is useful if you're using alt stores as singletons and doing server side rendering because of concurrency. In this particular scenario you would load the data in via bootstrap
and then use flush
to take a snapshot, render the data, and reset your stores so they are ready for the next request.
recycle :: ?...String -> undefined
If you wish to reset a particular, or all, store's state back to their original initial state you would call recycle
. Recycle takes an optional number of arguments as strings which correspond to the store's names you would like reset. If no argument is provided then all stores are reset.
When bootstrapping, snapshotting, or recycling there are special methods you can assign to your store to ensure any bookeeping that needs to be done. You would place these in your store's constructor.
bootstrap
is called after the store has been bootstrapped. Here you can add some logic to take your bootstrapped data and manipulate it.
class Store {
constructor() {
this.on('bootstrap', () => {
// do something here
})
}
}
snapshot
is called before the store's state is serialized. Here you can perform any final tasks you need to before the state is saved.
class Store {
constructor() {
this.on('snapshot', () => {
// do something here
})
}
}
init
is called when the store is initialized as well as whenever a store is recycled.
class Store {
constructor() {
this.on('init', () => {
// do something here
})
}
}
rollback
is called whenever all the stores are rolled back.
class Store {
constructor() {
this.on('rollback', () => {
// do something here
})
}
}
A single dispatcher instance is made available for listening to all events passing through. You can access this via the dispatcher
property: alt.dispatcher
and listening to all events is as easy as
alt.dispatcher.register(console.log)
Each store has a reference to the dispatcher as well
alt.createStore(class MyStore {
constructor() {
this.dispatcher.register(console.log)
}
})
You can choose to use alt in many ways just like you'd use flux. This means your asynchronous data fetching can live in the actions, or they can live in the stores. Stores may also be traditional singletons as in flux, or you can create an instance and have multilple store copies. This leads us into server side rendering.
Alt was built with isomorphism in mind. This means that you can run full flux server-side and pick back up on the client-side.
There are two options for using flux on the server:
With this approach your stores are singletons.
Any actions that load data must be synchronous, meaning you can fetch your data outside of actions and stores, and once done you fire off a synchronous action which loads
the store. Alternatively, you can gather all of your data, and once complete, you call bootstrap()
which seeds all the stores with some initial data.
Once you've completed loading the stores with data you call flush()
which takes a snapshot to send to the client and then resets all the stores' state back to their initial state. This allows the stores to be ready for the next server request.
If you're afraid of singletons, or if you want to skip synchronous actions or data loading you may want to create separate instances of flux for every server request. Taking this approach means you're making the trade-off of injecting the flux instance into your application in order to retrieve the stores and use the actions. This approach is similar to how fluxible solves isomorphic applications. Creating a new alt instances is fairly simple.
class Flux extends Alt {
constructor() {
super()
this.addActions('myActions', ActionCreators)
this.addStore('storeName', Store)
}
}
var flux = new Flux()
// sample using react...
React.render(
<App flux={flux} />,
document.body
)
// retrieving stores
flux.getStore('storeName').getState()
// actions
flux.getActions('myActions')
To help facilitate with isomorphism alt recommends you use iso, a helper function which serializes the data on the server into markup and then parses that data back into usable JavaScript on the client. Iso is a great complement to alt for a full-stack flux approach.
Flux has constants, the dispatcher is also pretty dumb as in it just takes what you passed in the action and pipes it through to the store. This is completely fine but not something you should be expected to write. The nice thing about constants is that you can easily grep for them in your application and see where all the actions are being called, with alt you get the same benefit without having to manage them.
var keyMirror = require('keymirror')
var actionConstants = keyMirror({
HANDLE_ACTION: null
})
var action = {
foo() {
AppDispatcher.handleAction({ type: actionConstants.HANDLE_ACTION, data: 'foo' })
}
}
var AppDispatcher = Object.assign(new Dispatcher(), {
handleAction(payload) {
this.dispatch(payload)
}
})
class Action {
handleAction() {
this.dispatch('foo')
}
}
var action = alt.createActions(Action)
FAQs
A flux implementation
The npm package alt receives a total of 10,293 weekly downloads. As such, alt popularity was classified as popular.
We found that alt demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.