Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
async-writer
Advanced tools
The async-writer module makes it possible to asynchronously write data to an output stream while still flushing out bytes in the correct order
The async-writer
module makes it possible to asynchronously write to an output stream while still flushing out bytes in the correct order. That is, the async-writer
module allows you to write parts of a stream out of order and the async-writer
module does the hard work of ensuring that the output bytes are flushed in the correct order. Content that is written before it is ready to be flushed is buffered and immediately flushed as soon it is ready.
An async writer is helpful if during writing you have to wait for an asynchronous operation to complete before writing to part of a stream. As an example, you might start writing a page to produce HTML and then get to a part of the page that depends on data that has not yet been loaded. With that use case, you can continue to write the remainder of the page and still pipe out the stream to the response. The async writer will ensure that the bytes are flushed out in the correct order.
npm install async-writer --save
The simplest usage of an async writer is shown below:
var through = require('through');
var output = '';
var stream = through(function write(data) {
output += data;
});
var out = require('async-writer').create(stream)
.on('error', function(err) {
// Something went wrong during writing
})
.on('end', function() {
// Value of output: "ABC"
});
out.write('A');
out.write('B');
out.write('C');
out.end();
Asynchronous, out-of-order writing to an output stream is shown below:
var through = require('through');
var output = '';
var stream = through(function write(data) {
output += data;
});
var out = require('async-writer').create(stream)
.on('error', function(err) {
// Something went wrong during writing
})
.on('end', function() {
// Value of output: "ABC"
});
out.write('A');
var asyncOut = out.beginAsync();
setTimeout(function() {
asyncOut.write('B');
asyncOut.end();
}, 1000);
out.write('C');
out.end();
You can also pipe another stream to a async writer. For example, the following code illustrates how multiple templates could be written to the same async writer:
var through = require('through');
var output = '';
var stream = through(function write(data) {
output += data;
});
var out = require('async-writer').create(stream)
.on('error', function(err) {
// Something went wrong during writing
})
.on('end', function() {
// Value of output: "ABC"
});
out.write('A');
var asyncOut = out.beginAsync();
require('fs').createReadStream('b.txt', 'utf8')
.pipe(asyncOut);
out.write('C');
out.end();
Just replace require('async-writer')
with require('async-writer/debug')
and you'll get debug output and diagrams of the current state.
FAQs
The async-writer module makes it possible to asynchronously write data to an output stream while still flushing out bytes in the correct order
The npm package async-writer receives a total of 899 weekly downloads. As such, async-writer popularity was classified as not popular.
We found that async-writer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.