
Security News
NIST Officially Stops Enriching Most CVEs as Vulnerability Volume Skyrockets
NIST will stop enriching most CVEs under a new risk-based model, narrowing the NVD's scope as vulnerability submissions continue to surge.
simple dampening library for node.js that makes sure that multiple successive calls to resolve a resource waits after the first, so that the resource is only resolved once per resource resolving storm
simple dampening library for node.js that makes sure that multiple successive calls to resolve a resource waits after the first, so that the resource is only resolved once per resource resolving storm.
The use case is where you have an expensive function, that takes some time and resolves a resource for you, and when you get it back you put it in a cache, of course. So that the next orderly request doens't have to go all the way over the network again.
The problem is that when you retsrat your service, you'll get a gazillion calls to the function - all of which happens too quickly for your cache to be filled.
What Chillman does is to remember what you asked for in the first fucntion call for that whatever it is, and to paus all subsequent calls for that same resource. When the very first call gets resolved, the other following calls will be continued, so a gazillion calls will only result in one resource utilization.
See tests for example. Promises are used heavillt and Chillman depends on that the resource-fullfillment function anse return a promise.
FAQs
simple dampening library for node.js that makes sure that multiple successive calls to resolve a resource waits after the first, so that the resource is only resolved once per resource resolving storm
The npm package chillman receives a total of 1 weekly downloads. As such, chillman popularity was classified as not popular.
We found that chillman demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
NIST will stop enriching most CVEs under a new risk-based model, narrowing the NVD's scope as vulnerability submissions continue to surge.

Company News
/Security News
Socket is an initial recipient of OpenAI's Cybersecurity Grant Program, which commits $10M in API credits to defenders securing open source software.

Security News
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.