Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
direct-vuex
Advanced tools
Use and implement your Vuex store with TypeScript types. Compatible with the Vue 3 composition API.
Use and implement your Vuex store with TypeScript types. Direct-vuex doesn't require classes, therefore it is compatible with the Vue 3 composition API.
Warning! BREAKING CHANGE in version 0.8: do not use as const
with defineDirectStore
. Additionally, there is a new limitation on how to declare a state. See also the section: Implement a Vuex Store with typed helpers.
First, add direct-vuex
to a Vue application:
npm install direct-vuex
The store can be implemented almost in the same way as usual.
Create the store:
import Vue from "vue"
import Vuex from "vuex"
import { defineDirectStore } from "direct-vuex"
Vue.use(Vuex)
const { store, rootActionContext, moduleActionContext } = defineDirectStore({
// … store implementation here …
})
// Export the direct-store instead of the classic Vuex store.
export default store
// The following exports will be used to enable types in the
// implementation of actions.
export { rootActionContext, moduleActionContext }
// The following lines enable types in the injected store '$store'.
export type AppStore = typeof store
declare module "vuex" {
interface Store<S> {
direct: AppStore
}
}
The classic Vuex store is still accessible through the store.original
property. We need it to initialize the Vue application:
import Vue from "vue"
import store from "./store"
new Vue({
store: store.original, // Inject the classic Vuex store.
// …
}).$mount("#app")
From a component, the direct store is accessible through the direct
property of the classic store:
const store = context.root.$store.direct // or: this.$store.direct
Or, you can just import it:
import store from "./store"
Then, the old way to call an action:
store.dispatch("mod1/myAction", myPayload)
… is replaced by the following wrapper:
store.dispatch.mod1.myAction(myPayload)
… which is fully typed.
Typed getters and mutations are accessible the same way:
store.getters.mod1.myGetter
store.commit.mod1.myMutation(myPayload)
Notice: The underlying Vuex store can be used simultaneously if you wish, through the injected $store
or store.original
.
In store and module options, the state
property shouldn't be declared with the ES6 method syntax.
Valid:
state: { p1: string } as Mod1State
state: (): Mod1State => { p1: string }
state: function (): Mod1State { return { p1: string } }
Invalid:
state(): Mod1State { return { p1: string } }
I'm not sure why but TypeScript doesn't infer the state type correctly when we write that.
Direct-vuex provides several useful helpers for implementation of the store. They are all optional. However, if you want to keep your classic implementation of a Vuex Store, then direct-vuex needs to infer the literal type of the namespaced
property. You can write namespaced: true as true
where there is a namespaced
property. But you don't need to worry about that if you use defineModule
.
The function defineModule
is provided solely for type inference. It is a no-op behavior-wise. It expects a module implementation and returns the argument as-is. This behaviour is similar to (and inspired from) the function defineComponent
from the composition API.
The generated function moduleActionContext
is a factory for creating a function mod1ActionContext
, which converts the injected action context to the direct-vuex one.
Here is how to use defineModule
and moduleActionContext
:
import { defineModule } from "direct-vuex"
import { moduleActionContext } from "./store"
export interface Mod1State {
p1: string
}
const mod1 = defineModule({
state: (): Mod1State => {
return {
p1: ""
}
}
getters: {
p1OrDefault(state) {
// Here, the type of 'state' is 'Mod1State'.
return state.p1 || "default"
}
},
mutations: {
SET_P1(state, p1: string) {
// Here, the type of 'state' is 'Mod1State'.
state.p1 = p1
}
},
actions: {
loadP1(context, payload: { id: string }) {
const { dispatch, commit, getters, state } = mod1ActionContext(context)
// Here, 'dispatch', 'commit', 'getters' and 'state' are typed.
}
},
})
export default mod1
const mod1ActionContext = (context: any) => moduleActionContext(context, mod1)
Warning: Types in the context of actions implies that TypeScript should never infer the return type of an action from the context of the action. Indeed, this kind of typing would be recursive, since the context includes the return value of the action. When this happens, TypeScript passes the whole context to any
. Tl;dr; Declare the return type of actions where it exists!
The generated function rootActionContext
converts the injected action context to the direct-vuex one, at the root level (not in a module).
actions: {
async actionInTheRootStore(context, payload) {
const { commit, state } = rootActionContext(context)
// … Here, 'commit' and 'state' are typed.
}
}
defineGetters
The function defineGetters
is provided solely for type inference. It is a no-op behavior-wise. It is a factory for a function, which expects the object of a getters
property and returns the argument as-is.
import { defineGetters } from "direct-vuex"
import { Mod1State } from "./mod1" // Import the local definition of the state (for example from the current module)
export default defineGetters<Mod1State>()({
getter1(state) {
// Here, the type of 'state' is 'Mod1State'.
},
})
Note: There is a limitation. The second parameters getters
in a getter implementation, is not typed.
defineMutations
The function defineMutations
is provided solely for type inference. It is a no-op behavior-wise. It is a factory for a function, which expects the object of a mutations
property and returns the argument as-is.
import { defineMutations } from "direct-vuex"
import { Mod1State } from "./mod1" // Import the local definition of the state (for example from the current module)
export default defineMutations<Mod1State>()({
SET_P1(state, p1: string) {
// Here, the type of 'state' is 'Mod1State'.
state.p1 = p1
}
})
defineActions
The function defineActions
is provided solely for type inference. It is a no-op behavior-wise. It expects the object of an actions
property and returns the argument as-is.
import { defineActions } from "direct-vuex"
export default defineActions({
loadP1(context, payload: { id: string }) {
const { dispatch, commit, getters, state } = mod1ActionContext(context)
// Here, 'dispatch', 'commit', 'getters' and 'state' are typed.
}
})
When the helper moduleActionContext
is used, linters may warn about an issue: "Variable used before it's assigned". I couldn't avoid circular dependencies. Module action contexts need to be inferred at the store level, because they contain rootState
etc.
Here is an example of a Vuex module implementation:
import { moduleActionContext } from "./store"
const mod1 = {
actions: {
loadP1(context, payload: { id: string }) {
const { commit, rootState } = mod1ActionContext(context)
// …
}
}
}
export default mod1
const mod1ActionContext = (context: any) => moduleActionContext(context, mod1)
It works because mod1ActionContext
is not executed at the same time it is declared. It is executed when an action is executed, ie. after all the store and modules are already initialized.
I suggest to disable the linter rule with a comment at the top of the source file.
With TSLint:
// tslint:disable: no-use-before-declare
With ESLint:
/* eslint-disable no-use-before-define */
Notice: A consequence of these circular dependencies is that the main store file must be imported first from the rest of the application. If a Vuex module is imported first, some part of your implementation could be undefined
at runtime.
With VS Code, our recommanded plugin is:
ms-vscode.vscode-typescript-tslint-plugin
)FAQs
Use and implement your Vuex store with TypeScript types. Compatible with the Vue 3 composition API.
We found that direct-vuex demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.