Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
CocktailJS is a small library to explore traits, talents, inheritance and annotations concepts in nodejs - Shake your objects and classes with Cocktail!
Cocktail is a small but yet powerful library with very simple principles:
##Reuse code Cocktail explores three mechanisms to share/reuse/mix code:
##Keep it simple
Cocktail has only one public method cocktail.mix()
but it relies on annotations
to tag some meta-data that describe the mix.
###Annotations Annotations are simple meta-data Cocktail uses to perform some tasks over the given mix. They become part of the process but usually they are not kept in the result of a mix.
var cocktail = require('cocktail'),
MyClass = function(){};
cocktail.mix(MyClass, {
'@properties': {
name: 'default name'
}
});
In the example above we created a "Class" named MyClass, and we use the @properties
annotation to create the property name and the corresponding setName and getName methods.
As it was mentioned before, annotations are meta-data, which means that they are not part of MyClass or its prototype.
###Combine Annotations and single parameter to export your class definition
Since version 0.2.0 you can define a class or trait without passing the constructor as the first parameter, and you can
export the result of the mix with one annotation so you don't forget module.exports = MyClass
:
MyClass.js
var cocktail = require('cocktail'),
MySuperClass = require('./MySuperClass');
cocktail.mix({
'@extends': MySuperClass,
'@exports': module,
'@properties' : {
name: 'a default name'
}
});
###Even easier Single Parameter Class Definition
Version 0.3 introduces a pseudo-annotation @as
to help Single Parameter Class Definition. Now you can define
a Class using @as
passing a value of class
:
MySuperClass.js
var cocktail = require('cocktail')
cocktail.mix({
'@exports' : module,
'@as' : 'class',
'@properties' : {
name: 'a default name'
}
});
npm install cocktail
or add cocktail to your package.json
and then npm install
var cocktail = require('cocktail')
in your file.Guides can be found at CocktailJS Guides
The latest documentation is published at CocktailJS Documentation
A Cocktail playground can be found in cocktail recipes repo.
In lieu of a formal styleguide, take care to maintain the existing coding style. Add unit tests for any new or changed functionality. Lint and test your code using Grunt.
Add your unit and/or integration tests and execute
$ grunt test
Run grunt to check lint and execute tests
$ grunt
Install instanbul from npm globally if you don't have it already installed
$ npm install -g istanbul
Run
$ istanbul cover _mocha -- -u exports --recursive test
see CHANGELOG
Copyright (c) 2013 Maximiliano Fierro
Licensed under the MIT license.
FAQs
CocktailJS is a small library to explore traits, talents, inheritance and annotations concepts in nodejs - Shake your objects and classes with Cocktail!
The npm package cocktail receives a total of 118 weekly downloads. As such, cocktail popularity was classified as not popular.
We found that cocktail demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.