Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
cycle-gear
Advanced tools
cycle-gear
is a formalization of the CycleJS MVI pattern
and a main function factory (pedal
) to make use of the pattern.
Cycle's documentation on the CycleJS MVI pattern makes it clear that Cycle's goal is not to formalize the MVI pattern into the framework.
Formalizing an architecture pattern, however, can provide a common component platform and
organization scheme to a project. cycle-gear
is one approach to componentizing the pieces
of a CycleJS main component into a form encouraging separation of concerns, and easy reuse of
the component parts.
A Gear
consists of an intent
, model
, and a set of teeth
comprising of a filter
and a view
.
The intent
responds to the changes from the gear's sources, converting them into actions
for a model
to respond to.
The model
takes the actions of the gear's intent
and produces a single observable of
model states.
A tooth
produces output to a gear's sinks by filter
ing the gear's model states and
presenting them through a view
.
pedal
pedal
is a main factory function for the Gear
pattern. It takes a transmission
of
Gears, default states for gears, which teeth to bind to which sinks, and from that
builds a Cycle main to wire the gears up to Cycle sources and sinks.
A transmission
is an observable of gears or a factory from Cycle sources to an observable
of gears. At the top level of an application might be a transmission
defined by a history
router such as @cycle/history, and at lower levels a
transmission
might be some other sort of user-action dependent state machine.
FAQs
Main function factory for CycleJS
The npm package cycle-gear receives a total of 1 weekly downloads. As such, cycle-gear popularity was classified as not popular.
We found that cycle-gear demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.