Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
electron-bus
Advanced tools
A message bus for Electron applications, allowing simple communication between the background and renderer processes.
A message bus is a method of loosely-coupled communication between different parts of an application. Messages can be published to the bus, and modules can subscribe to receive messages from the bus. This can be useful for inter-process communication, logging, alerts, and other events which cut across a system.
Messages published to the bus can be received by listener in the background, or on the renderer, which allows code dealing with those messages to be moved freely between those systems without having to do a major restructure. It also abstracts Electron's strange heterogeneous IPC methods away, hopefully making your systems easier to reason about.
npm install electron-bus
// From the background process
const {BrowserWindow} = require("electron");
const {ElectronBus} = require("electron-bus");
const win = new BrowserWindow({width: 800, height: 600});
const bus = new ElectronBus(win);
// Listen for logging events
bus.subscribe("log", data => console.log(new Date(), data));
// From the renderer process
const {ElectronBus} = require("electron-bus");
const bus = new ElectronBus(); // Automatically connects to the background process
// This message will be received and logged by the background process
bus.dispatch("log", "Started Renderer Process");
You can wait for a response to a particular message, by passing {waiting: true}
when you dispatch a message. This will return a Promise which resolves when a response to your message is received. If no response is forthcoming, the Promise will reject automatically after 15 seconds. You can change the timeout by passing a timeout
parameter along with waiting
, e.g. {waiting: true, timeout: 5000}
would wait for 5 seconds before timeout.
const {ElectronBus} = require("electron-bus");
const bus = new ElectronBus();
bus.subscribe("responding-channel", (data, returnChannel) => {
const response = doSomethingWith(data);
if (returnChannel) {
bus.dispatch(returnChannel, response);
}
});
try {
const response = await bus.dispatch("responding-channel", {hello: "World!"}, {waiting: true});
console.log(response); // The output of doSomethingWith()
} catch (e) {
console.error(e);
}
Execution order can mean that some messages distributed before all the subscribers are set up. It's probably best practice to set up your subscribers first, before starting to dispatch events.
FAQs
A message bus for Electron applications
We found that electron-bus demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.