
Research
npm Malware Targets Telegram Bot Developers with Persistent SSH Backdoors
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
call-me-maybe
Advanced tools
Let your JS API users either give you a callback or receive a promise
The 'call-me-maybe' npm package is designed to handle callbacks and promises in a unified way. It allows developers to write functions that can return a promise if no callback is provided, or execute a callback if one is given. This flexibility makes it easier to work with asynchronous code in JavaScript.
Handling callbacks and promises
This feature allows a function to handle both callbacks and promises. If a callback is provided, it is called with the result; otherwise, a promise is returned. The code sample demonstrates how to implement a simple asynchronous operation that can be used either way.
const maybe = require('call-me-maybe');
function asyncOperation(callback) {
return maybe(callback, new Promise((resolve, reject) => {
setTimeout(() => resolve('Done!'), 1000);
}));
}
// Using with callback
asyncOperation(result => console.log(result));
// Using as a promise
asyncOperation().then(result => console.log(result));
Bluebird is a comprehensive promise library that provides a rich set of features for working with promises. It includes utilities for converting callback-based APIs to promises, which is similar to what 'call-me-maybe' offers, but it is more feature-rich and includes optimizations for performance.
Pify is a module that converts callback-based functions or modules to return promises. It is similar to 'call-me-maybe' in that it helps bridge the gap between callbacks and promises, but it focuses solely on converting existing functions rather than handling both styles in new functions.
Let your JS API users either give you a callback or receive a promise.
var maybe = require("call-me-maybe")
module.exports = function asyncFunc (cb) {
return maybe(cb, new Promise(function(resolve, reject) {
// ...
}))
}
If the callback cb
is truthy, returns undefined
and will call cb
when promise
is settled. The parameters passed to cb
are standard error-first:
promise
is fulfilled, then it is called with the result of the promise: cb(null, result)
promise
is rejected, then it is called with the rejection error: cb(err)
If cb
is falsey, then promise
is returned.
FAQs
Let your JS API users either give you a callback or receive a promise
The npm package call-me-maybe receives a total of 5,687,881 weekly downloads. As such, call-me-maybe popularity was classified as popular.
We found that call-me-maybe demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Security News
pip, PDM, pip-audit, and the packaging library are already adding support for Python’s new lock file format.
Product
Socket's Go support is now generally available, bringing automatic scanning and deep code analysis to all users with Go projects.