
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
bard-instruments
Advanced tools
Utilities for every day development challenges in JS/SPA/Mobx/React web applications.
It is a basket of utils to cherry pick that I improve and test over time.
(See section "part of Bard Ecosystem" for details at the end of the docs).
Some utils rely on lodash 4.x, so it is needed as peer|dependency.
npm install bard-instruments
npm install lodash@4
All utils are in their own module under /lib. Many of them work both in Nodejs and browser.
Importing is different if you use ES6 or CJS.
Example:
// Node / cjs
const RateLimitPromiseQueue = require('bard-instruments/lib/async/RateLimitPromiseQueue').default
// ES6
import RateLimitPromiseQueue from 'bard-instruments/lib/async/RateLimitPromiseQueue'
const promiseQueue = new RateLimitPromiseQueue({minTimeBetweenTasks: 1000})
This is a simple list. The source code has more detailed usage example.
/async/promiseAllProps
Wait for a map
of promises; fails as soon as one fails.
/async/promiseAllPropsResults
Wait for a map
of promises; does not fail; failed promises values will be the corresponding error.
/async/promiseAllResults
Wait for an array
of promises; does not fail; failed promises values will be the corresponding error.
/async/RateLimitPromiseQueue
Promise queue that enforces an amount of time that must have passed between each task. Typical use case: request rate limit to an API.
/async/sleep
Delay the execution of a Promise Chain.
/axios/createRateLimitAdapter
/dom/injectCss
/mobx/AsyncDateModel
Observable model of typical asynchronous data state.
/mobx/ObservableViewport
Expose observable properties of the browser viewport.
/withVM
Higher order component that allows to connect easily a mobx root store to a component via React context api.
/withVM2
Same as withVM but newer implementation using mobx-react@6 and React hooks.
This one does not have a custom injection option like withVM but this could be added in the future.
Choose one based on your current dependencies.
I am developing an ecosystem to easily build frontend apps based on React and Mobx. The utils are loosely related to each other, so that they can be shared in javascript projects, especially in the "Bard ecosystem".
More info:
3.0.0-beta.0 (2021-03-07)
AsyncDataModel is now called AsyncData
update to mobx6 + AsyncData + move withVM to mobx folder (f2f04ab)
FAQs
Useful utilities for JS/SPA/Mobx/React web applications
The npm package bard-instruments receives a total of 0 weekly downloads. As such, bard-instruments popularity was classified as not popular.
We found that bard-instruments demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.