Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
cls-bluebird
Advanced tools
The cls-bluebird npm package is a utility that integrates continuation-local storage (CLS) with the Bluebird promise library. This allows you to maintain context across asynchronous operations, which is particularly useful for things like request tracing, logging, and managing user sessions.
Integrate CLS with Bluebird
This feature allows you to integrate CLS with Bluebird promises. The code sample demonstrates how to create a namespace, integrate it with Bluebird, and maintain context across asynchronous operations.
const cls = require('cls-hooked');
const ns = cls.createNamespace('myNamespace');
const Promise = require('bluebird');
require('cls-bluebird')(ns, Promise);
ns.run(() => {
ns.set('key', 'value');
Promise.resolve().then(() => {
console.log(ns.get('key')); // Outputs: 'value'
});
});
Maintain context in nested promises
This feature ensures that the context is maintained even in nested promises. The code sample shows how the context set in the outer promise is accessible in the inner promise.
const cls = require('cls-hooked');
const ns = cls.createNamespace('myNamespace');
const Promise = require('bluebird');
require('cls-bluebird')(ns, Promise);
ns.run(() => {
ns.set('key', 'value');
Promise.resolve().then(() => {
return Promise.resolve().then(() => {
console.log(ns.get('key')); // Outputs: 'value'
});
});
});
cls-hooked is a continuation-local storage library that works with async/await and other modern JavaScript features. Unlike cls-bluebird, it does not specifically integrate with Bluebird but can be used with any promise library.
async_hooks is a core Node.js module that provides an API to track asynchronous resources. It is more low-level compared to cls-bluebird and requires more manual setup but offers greater flexibility and is not limited to any specific promise library.
For documentation, check the above link. It works in the same way and uses the same tests.
Only difference is the call signature. You can provide a specific Bluebird constructor to be shimmed, rather than the default.
API: clsBluebird( ns [, Promise] )
var cls = require('continuation-local-storage');
var ns = cls.createNamespace('NODESPACE');
var Promise = require('bluebird');
var clsBluebird = require('clsBluebird');
clsBluebird(ns, Promise);
1.1.0
shimmer
dependencyFAQs
Make bluebird work with the continuation-local-storage module.
The npm package cls-bluebird receives a total of 166,244 weekly downloads. As such, cls-bluebird popularity was classified as popular.
We found that cls-bluebird demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.