Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Redux on autopilot.
Brought to you by EricElliottJS.com and DevAnywhere.io.
npm install --save autodux
And then in your file:
import autodux from 'autodux';
Or using CommonJS syntax:
const autodux = require('autodux');
Autodux lets you create reducers like this:
export const {
actions: {
setUser, setUserName, setAvatar
},
selectors: {
getUser, getUserName, getAvatar
}
} = autodux({
slice: 'user',
initial: {
userName: 'Anonymous',
avatar: 'anon.png'
}
});
That creates a full set of action creators, selectors, reducers, and action type constants -- everything you need for fully functional Redux state management.
Everything's on autopilot -- but you can override everything when you need to.
Redux is great, but you have to make a lot of boilerplate:
It's great that Redux is such a low-level tool. It's allowed a lot of flexibility and enabled the community to experiment with best practices and patterns.
It's terrible that Redux is such a low-level tool. It turns out that:
counter/increment
.Lots of Redux beginners separate all these things into separate files, meaning you have to open and import a whole bunch of files just to get some simple state management in your app.
What if you could write some simple, declarative code that would automatically create your:
x => ({ type: 'foo', payload: x })
{...state, ...payload}
)Turns out, when you add this simple logic on top of Redux, you can do a lot more with a lot less code.
import autodux, { id } from 'autodux';
export const {
reducer,
initial,
slice,
actions: {
increment,
decrement,
multiply
},
selectors: {
getValue
}
} = autodux({
// the slice of state your reducer controls
slice: 'counter',
// The initial value of your reducer state
initial: 0,
// No need to implement switching logic -- it's
// done for you.
actions: {
increment: state => state + 1,
decrement: state => state - 1,
multiply: (state, payload) => state * payload
},
// No need to select the state slice -- it's done for you.
selectors: {
getValue: id
}
});
As you can see, you can destructure and export the return value directly where you call autodux()
to reduce boilerplate to a minimum. It returns an object that looks like this:
{
initial: 0,
actions: {
increment: { [Function]
type: 'counter/increment'
},
decrement: { [Function]
type: 'counter/decrement'
},
multiply: { [Function]
type: 'counter/multiply'
}
},
selectors: {
getValue: [Function: wrapper]
},
reducer: [Function: reducer],
slice: 'counter'
}
Let's explore that object a bit:
const actions = [
increment(),
increment(),
increment(),
decrement()
];
const state = actions.reduce(reducer, initial);
console.log(getValue({ counter: state })); // 2
console.log(increment.type); // 'counter/increment'
Action creators, reducers and selectors have simplified APIs.
With autodux, you can omit (almost) everything.
An action is an action creator/reducer pair. Usually, these line up in neat 1:1 mappings. It turns out, you can do a lot with some simple defaults:
set${slice}
action lets you set any key in your reducer -- basically: {...state, ...payload}
. If your slice
is called user
, the set
creator will be called setUser
.set{key}
will exist for each key in your initial
state. If you have a key called userName
, you'll have an action called setUserName
created automatically.Like action creators and reducers, selectors are automatically created for each key in your initial state. get{key}
will exist for each key in your initial
state., and get{slice}
will exist for the entire reducer state.
For simple reducers, all the action creators, reducers, and selectors can be created for you automatically. All you have to do is specify the initial state shape and export the bindings.
Action creators are optional! If you need to set a username, you might normally create an action creator like this:
const setUserName = userName => ({
type: 'userReducer/setUserName',
payload: userName
})
With autodux, if your action creator maps directly from input to payload, you can omit it. autodux will do it for you.
By omitting the action creator, you can shorten this:
actions: {
multiply: {
create: by => by,
reducer: (state, payload) => state * payload
}
}
To this:
actions: {
multiply: (state, payload) => state * payload
}
You don't need to worry about setting the type in autodux action creators. That's handled for you automatically. In other words, all an action creator has to do is return the payload.
With Redux alone you might write:
const setUserName = userName => ({
type: 'userReducer/setUserName',
payload: userName
})
With autodux, that becomes:
userName => userName
Since that's the default behavior, you can omit that one entirely.
You don't need to create action creators unless you need to map the inputs to a different payload output. For example, if you need to translate between an auth provider user and your own application user objects, you could use an action creator like this:
({ userId, displayName }) => ({ uid: userId, userName: displayName })
Here's how you'd implement our multiply action if you want to use a named parameter for the multiplication factor:
//...
actions: {
multiply: {
// Destructure the named parameter, and return it
// as the action payload:
create: ({ by }) => by,
reducer: (state, payload) => state * payload
}
}
//...
Note: Reducers are optional. If your reducer would just assign the payload props to the state (
{...state, ...payload}
), you're already done.
Switching over different action types is automatic, so we don't need an action object that isolates the action type and payload. Instead, we pass the action payload directly, e.g:
With Redux:
const INCREMENT = 'INCREMENT';
const DECREMENT = 'DECREMENT';
const MULTIPLY = 'MULTIPLY';
const counter = (state = 0, action = {}) {
switch (action.type){
case INCREMENT: return state + 1;
case DECREMENT: return state - 1;
case MULTIPLY : return state * action.payload
default: return state;
}
};
With Autodux, action type handlers are switched over automatically. No more switching logic or manual juggling with action type constants.
const counter = autodux({
slice: 'counter',
initial: 0,
actions: {
increment: state => state + 1,
decrement: state => state - 1,
multiply: (state, payload) => state * payload
}
});
Autodux infers action types for you automatically using the slice and the action name, and eliminates the need to write switching logic or worry about (or forget) the default case.
Because the switching is handled automatically, your reducers don't need to worry about the action type. Instead, they're passed the payload directly.
Note: Selectors are optional. By default, every key in your initial state will have its own selector, prepended with
get
and camelCased. For example, if you have a key calleduserName
, agetUserName
selector will be created automatically.
Selectors are designed to take the application's complete root state object, but the slice you care about is automatically selected for you, so you can write your selectors as if you're only dealing with the local reducer.
This has some implications with unit tests. The following selector will just return the local reducer state (Note: You'll automatically get a default selector that does the same thing, so you don't ever need to do this yourself):
import { autodux, id } from 'autodux';
const counter = autodux({
// stuff here
selectors: {
getValue: id // state => state
},
// other stuff
In your unit tests, you'll need to pass the key for the state slice to mock the global store state:
test('counter.getValue', assert => {
const msg = 'should return the current count';
const { getValue } = counter.selectors;
const actual = getValue({ counter: 3 });
const expected = 3;
assert.same(actual, expected, msg);
assert.end();
});
Although you should avoid selecting state from outside the slice you care about, the root state object is passed as a convenience second argument to selectors:
import autodux from 'autodux';
const counter = autodux({
// stuff here
selectors: {
// other selectors
rootState: (_, root) => root
},
// other stuff
In your unit tests, this allows you to retrieve the entire root state:
test('counter.rootState', assert => {
const msg = 'should return the root state';
const { rootState } = counter.selectors;
const actual = rootState({ counter: 3, otherSlice: 'data' });
const expected = { counter: 3, otherSlice: 'data' };
assert.same(actual, expected, msg);
assert.end();
});
assign = (key: String) => reducer: Function
Often, we want our reducers to simply set a key in the state to the payload value. assign()
makes that easy. e.g.:
const {
actions: {
setUserName,
setAvatar
},
reducer
} = autodux({
slice: 'user',
initial: {
userName: 'Anonymous',
avatar: 'anonymous.png'
},
actions: {
setUserName: assign('userName'),
setAvatar: assign('avatar')
}
});
const userName = 'Foo';
const avatar = 'foo.png';
const state = [
setUserName(userName),
setAvatar(avatar)
].reduce(reducer, undefined);
// => { userName: 'Foo', avatar: 'foo.png' }
Since that's the default behavior when actions are omitted, you can also shorten that to:
const {
actions: {
setUserName,
setAvatar
},
reducer
} = autodux({
slice: 'user',
initial: {
userName: 'Anonymous',
avatar: 'anonymous.png'
}
});
id = x => x
Useful for selectors that simply return the slice state:
selectors: {
getValue: id
}
FAQs
Automate the Redux boilerplate.
The npm package autodux receives a total of 2,200 weekly downloads. As such, autodux popularity was classified as popular.
We found that autodux demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.