Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Everyone knows that A/B testing is critical to optimizing any app, but implementing tests and analyzing results can be awkward and time-consuming.
As developers, we want adding A/B tests to any app to be as simple as adding a line of code. We also want machine learning algorithms to analyze our test results and optimize our app for us, automatically, without having to think twice.
This is why we created Autotune. With Autotune, you create special variables in your program that Autotune will automatically tune over time to improve outcomes.
Not sure what your main call-to-action should be, or what color to use for the button? Not sure which social sharing features will be most relevant for your audience? Just make a few good guesses and let Autotune automatically discover and make the best decisions.
Arguing with colleagues about what title to use for the homepage? Let Autotune pick the one that converts the most users:
<!-- Place a few options between <autotune> tags. -->
<autotune>
<h1>We're here to revolutionize the healthcare industry with blockchain-based nursing.</h1>
<h1>We're here to revolutionize location-based news aggregation with proximity drones.</h1>
<h1>We're here to revolutionize meme aggregation and delivery with AI-based CDNs.</h1>
</autotune>
<!-- Indicate a desirable outcome with autotune attributes. -->
<a href="/signup" autotune>Sign up</a>
<!-- Load the autotune library and suggestions that autotune has learned so far. -->
<script src="//js.autotune.xyz/11397F73-FF90-4831-B7F7-85023F1741E4.js"></script>
Autotune will test the options you've given between <autotune>
tags, and automatically favor the option that gets most users to click Sign up
.
Not sure if your main CTA should be Log in
or Sign in
? Let Autotune pick the one that works best:
import * as autotune from "autotune";
autotune.init("11397F73-FF90-4831-B7F7-85023F1741E4");
ReactDOM.render(
<div>
<h1>Welcome to my app!</h1>
<button onClick={autotune.complete}>
{autotune.flipCoin("cta") ? "Log in" : "Sign in"}
</button>
</div>,
document.getElementById("root")
);
Autotune will flip a coin to decide whether to use Log in
or Sign in
, and over time
will favor the choice that gets more users to click the button.
Here we add an autotuned welcome message to a simple React app:
import * as autotune from "autotune";
// 1. Initialize
autotune.init("11397F73-FF90-4831-B7F7-85023F1741E4");
// 2. Create a variable
const title = autotune.oneOf(
"👋 Please sign in.",
"Welcome! Please sign in.",
"Bienvenidos! Please sign in."
);
ReactDOM.render(
<div>
// 3. Use the variable
<h1>{title.value}</h1>
<button
onClick={() =>
/* 4. Indicate when a goal is completed */ autotune.complete()
}
>
Sign in
</button>
</div>,
document.getElementById("root")
);
Autotune will experiment with different titles on this page, and automatically tune the app to use the title that causes the most users to click 'Sign in' over time.
FAQs
Automatically tune JavaScript apps
The npm package autotune receives a total of 93 weekly downloads. As such, autotune popularity was classified as not popular.
We found that autotune demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.