Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
A minimal application harness that stays out of your way and out of your code.
v2 is currently in progress and is NOT yet shipped / final.
To install it, you need to run
npm install billy@v2-beta
A minimal application harness that stays out of your way and out of your code.
This is the v2 branch, which has back-compat breaking changes from v1, see billy v1.7.3 for the old version.
$ npm install billy
The primary goal and driving philosophy of Billy is to provide a cohesive and useful set of patterns for building an application that doesn't creep its way into your business logic and domain code.
It is flexible and generic enough to work great for building server apps, browser apps, Javascript games, or even CLI utilities.
Much like express, Billy strives not to be a framework that permeates all parts of your codebase, but rather the scaffolding that allows you to roll your own application architecture stack.
Application
instance and the Service StackThe root of your application is a single instance of the Application
class:
const Application = require('billy');
const app = new Application();
An application is composed of several services. A service is a class that sets up and starts the various dependencies in your application. Services should be free of all business logic, and should be the only parts of the aplication that are aware of Billy.
Container
instance and Dependency InjectionPhilosophy behind the IoC container
Code Examples
Billy is written to run in modern Javascript environments (ES2017) that support the CommonJS module system (e.g, Node 7).
Examples of requiring the transpiled versions of the lib
Application()
Root application class.
const app = new Application();
Application#service(T)
Register a service class with the application.
app.service(PostgresDatabaseService);
Application#start()
Instantiate and start all services in the order they were registered.
await app.start();
Application#stop()
Give each service a chance to shut down in reverse order they were started.
await app.stop();
Application#container
Reference to the dependency injection container for the application.
Container
The dependency injection container. There is no need to instantiate this
directly as a reference to the application's container is exposed as a property
on the Application
instance:
const container = app.container;
Container#registerValue(tag, thing)
Store a simple value in the container. Every time the tag
dependency is
resolved, the same value is returned.
app.container.registerValue('config', require('./config.json'));
Container#registerFactory(tag, factory)
Store a factory function in the container. Every time the tag
dependency is
resolved, the factory function will be called with its parameters injected.
app.container.registerFactory('currentTime', () => new Date());
Container#registerClass(tag, T)
Store a class in the container. Every time the tag
dependency is resolved, a
fresh instance of the class is instantiated, with its constructor parameters
injected.
app.container.registerClass('logger', ElasticSearchLogger);
Container#registerSingleton(tag, T)
Store a singleton class in the container. The first time tag
dependency
is resolved, the class will be instantiated and cached. Each subsequent
resolution of tag
will return the original instance after that.
app.container.registerSingleton('db', PostgresDatabaseDriver);
Container#resolve(tag)
Resolve a dependency from the container via its string tag. Typically this method shouldn't be used directly, but rather rely on automatic injection to get a hold of registered dependencies.
const db = app.container.resolve('db');
$ npm test
FAQs
A minimal application harness that stays out of your way and out of your code.
We found that billy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.