
Product
Rust Support Now in Beta
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.
Dependency injection for modular web applications
Please see the documentation at ditox.js.org
You can use the following command to install this package:
npm install --save ditox
The package can be used as UMD module. Use jsdelivr.com CDN site to load ditox:
<script src="//cdn.jsdelivr.net/npm/ditox/dist/umd/index.js" />
<script>
const container = Ditox.createContainer();
</script>
DI pattern in general allows to declare and construct a code graph of an application. It can be described by following phases:
Diagram:
import {createContainer, injectable, optional, token} from 'ditox';
// This is app code, some factory functions and classes:
function createStorage(config) {}
function createLogger(config) {}
class UserService {
constructor(storage, logger) {}
}
// Define tokens for injections.
const STORAGE_TOKEN = token < UserService > 'Token description for debugging';
const LOGGER_TOKEN = token();
const USER_SERVICE_TOKEN = token();
// Token can be optional with a default value.
const STORAGE_CONFIG_TOKEN = optional(token(), {name: 'default storage'});
// Create the container.
const container = createContainer();
// Provide a value to the container.
container.bindValue(STORAGE_CONFIG_TOKEN, {name: 'custom storage'});
// Dynamic values are provided by factories.
// A factory can be decorated with `injectable()` to resolve its arguments.
// By default, a factory has `singleton` lifetime.
container.bindFactory(
STORAGE_TOKEN,
injectable(createStorage, STORAGE_CONFIG_TOKEN),
);
// A factory can have `transient` lifetime to create a value on each resolving.
container.bindFactory(LOGGER_TOKEN, createLogger, {scope: 'transient'});
// A class can be injected by `injectableClass()` which calls its constructor
// with injected dependencies as arguments.
container.bindFactory(
USER_SERVICE_TOKEN,
injectable(
(storage, logger) => new UserService(storage, logger),
STORAGE_TOKEN,
// A token can be made optional to resolve with a default value
// when it is not found during resolving.
optional(LOGGER_TOKEN),
),
{
// `scoped` and `singleton` scopes can have `onRemoved` callback.
// It is called when a token is removed from the container.
scope: 'scoped',
onRemoved: (userService) => userService.destroy(),
},
);
// Get a value from the container, it returns `undefined` in case a value is not found.
const logger = container.get(LOGGER_TOKEN);
// Resolve a value, it throws `ResolverError` in case a value is not found.
const userService = container.resolve(USER_SERVICE_TOKEN);
// Remove a value from the container.
container.remove(LOGGER_TOKEN);
// Clean up the container.
container.removeAll();
Ditox.js supports "parent-child" hierarchy. If the child container cannot to resolve a token, it asks the parent container to resolve it:
import {creatContainer, token} from 'ditox';
const V1_TOKEN = token();
const V2_TOKEN = token();
const parent = createContainer();
parent.bindValue(V1_TOKEN, 10);
parent.bindValue(V2_TOKEN, 20);
const container = createContainer(parent);
container.bindValue(V2_TOKEN, 21);
container.resolve(V1_TOKEN); // 10
container.resolve(V2_TOKEN); // 21
A container can have multiple parent containers. Pass an array of parents when creating a container. During resolution, parents are queried from left to right, and the first parent that provides the token wins.
import {createContainer, token} from 'ditox';
const VALUE = token();
// Create two parents
const p1 = createContainer();
const p2 = createContainer();
// Case 1: Only the second parent provides the token
p2.bindValue(VALUE, 'from-p2');
const child = createContainer([p1, p2]);
child.get(VALUE); // 'from-p2' (found in the second parent)
// Case 2: Both parents provide the token — order matters (left-to-right)
p1.bindValue(VALUE, 'from-p1');
const child2 = createContainer([p1, p2]);
child2.resolve(VALUE); // 'from-p1' (first parent wins)
// The child can still override parents
child2.bindValue(VALUE, 'from-child');
child2.resolve(VALUE); // 'from-child'
Ditox.js supports managing the lifetime of values which are produced by factories. There are the following types:
singleton
- This is the default. The value is created and cached by the
most distant parent container which owns the factory function.scoped
- The value is created and cached by the nearest container which owns
the factory function.transient
- The value is created every time it is resolved.singleton
This is the default scope. "Singleton" allows to cache a produced value by a most distant parent container which registered the factory function:
import {creatContainer, token} from 'ditox';
const TAG_TOKEN = token();
const LOGGER_TOKEN = token();
const createLogger = (tag) => (message) => console.log(`[${tag}] ${message}`);
const parent = createContainer();
parent.bindValue(TAG_TOKEN, 'parent');
parent.bindFactory(LOGGER_TOKEN, injectable(createLogger, TAG_TOKEN), {
scope: 'singleton',
});
const container1 = createContainer(parent);
container1.bindValue(TAG_TOKEN, 'container1');
const container2 = createContainer(parent);
container2.bindValue(TAG_TOKEN, 'container2');
parent.resolve(LOGGER_TOKEN)('xyz'); // [parent] xyz
container1.resolve(LOGGER_TOKEN)('foo'); // [parent] foo
container2.resolve(LOGGER_TOKEN)('bar'); // [parent] bar
scoped
"Scoped" lifetime allows to have sub-containers with own instances of some services which can be disposed. For example, a context during HTTP request handling, or other unit of work:
import {creatContainer, token} from 'ditox';
const TAG_TOKEN = token();
const LOGGER_TOKEN = token();
const createLogger = (tag) => (message) => console.log(`[${tag}] ${message}`);
const parent = createContainer();
// `scoped` is default scope and can be omitted.
parent.bindFactory(LOGGER_TOKEN, injectable(createLogger, TAG_TOKEN), {
scope: 'scoped',
});
const container1 = createContainer(parent);
container1.bindValue(TAG_TOKEN, 'container1');
const container2 = createContainer(parent);
container2.bindValue(TAG_TOKEN, 'container2');
parent.resolve(LOGGER_TOKEN)('xyz'); // throws ResolverError, the parent does not have TAG value.
container1.resolve(LOGGER_TOKEN)('foo'); // [container1] foo
container2.resolve(LOGGER_TOKEN)('bar'); // [container2] bar
// Dispose a container.
container1.removeAll();
transient
"Transient" makes to a produce values by the factory for each resolving:
import {createContainer, token} from 'ditox';
const TAG_TOKEN = token();
const LOGGER_TOKEN = token();
const createLogger = (tag) => (message) => console.log(`[${tag}] ${message}`);
const parent = createContainer();
parent.bindValue(TAG_TOKEN, 'parent');
parent.bindFactory(LOGGER_TOKEN, injectable(createLogger, TAG_TOKEN), {
scope: 'transient',
});
const container1 = createContainer(parent);
container1.bindValue(TAG_TOKEN, 'container1');
const container2 = createContainer(parent);
container2.bindValue(TAG_TOKEN, 'container2');
parent.resolve(LOGGER_TOKEN)('xyz'); // [parent] xyz
container1.resolve(LOGGER_TOKEN)('foo'); // [container1] foo
container2.resolve(LOGGER_TOKEN)('bar'); // [container2] bar
parent.bindValue(TAG_TOKEN, 'parent-rebind');
parent.resolve(LOGGER_TOKEN)('xyz'); // [parent-rebind] xyz
Dependencies can be organized as modules in declarative way with
ModuleDeclaration
. It is useful for providing pieces of functionality from
libraries to an app which depends on them.
import {Module, ModuleDeclaration, token} from 'ditox';
import {TRANSPORT_TOKEN} from './transport';
export type Logger = {log: (message: string) => void};
export const LOGGER_TOKEN = token<Logger>();
type LoggerModule = Module<{logger: Logger}>;
const LOGGER_MODULE_TOKEN = token<LoggerModule>();
const LOGGER_MODULE: ModuleDeclaration<LoggerModule> = {
// An optional explicit token for a module itself
token: LOGGER_MODULE_TOKEN,
factory: (container) => {
const transport = container.resolve(TRANSPORT_TOKEN).open();
return {
logger: {log: (message) => transport.write(message)},
destroy: () => transport.close(),
};
},
exports: {
logger: LOGGER_TOKEN,
},
};
Later such module declarations can be bound to a container:
const container = createContainer();
// bind a single module
bindModule(container, LOGGER_MODULE);
// or bind multiple depenendency modules
bindModules(container, [DATABASE_MODULE, CONFIG_MODULE, API_MODULE]);
Utility functions for module declarations:
declareModule()
– declare a module as ModuleDeclaration
however token
field can be optional for anonymous modules.declareModuleBindings()
– declares an anonymous module with imports. This
module binds the provided ones to a container.Example for these functions:
const LOGGER_MODULE = declareModule<LoggerModule>({
factory: createLoggerModule,
exports: {
logger: LOGGER_TOKEN,
},
});
const APP_MODULE = declareModuleBinding([LOGGER_MODULE, DATABASE_MODULE]);
This project is licensed under the MIT license.
3.1.0 (2025-08-22)
All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.
FAQs
Dependency injection for modular web applications
The npm package ditox receives a total of 547 weekly downloads. As such, ditox popularity was classified as not popular.
We found that ditox demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.
Product
Socket Fix 2.0 brings targeted CVE remediation, smarter upgrade planning, and broader ecosystem support to help developers get to zero alerts.
Security News
Socket CEO Feross Aboukhadijeh joins Risky Business Weekly to unpack recent npm phishing attacks, their limited impact, and the risks if attackers get smarter.