Security News
cURL Project and Go Security Teams Reject CVSS as Broken
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Exhaustiveness checking in TypeScript
Tiny bundle footprint for typesafe exhaustiveness checks with helpful type inference
to ensure you haven’t forgotten any case.
exhaustive
is available as a package on NPM. Install it with your favorite package manager:
npm install exhaustive
import { exhaustive } from "exhaustive";
enum Role {
ADMIN = 'ADMIN',
DEFAULT = 'DEFAULT',
VIEWER = 'VIEWER',
}
enum Permission {
DELETE = 'DELETE',
EDIT = 'EDIT',
VIEW = 'VIEW',
}
const getUserPermissions = (role: Role) =>
exhaustive(role, {
ADMIN: () => [Permission.DELETE, Permission.EDIT, Permission.VIEW],
DEFAULT: () => [Permission.EDIT, Permission.VIEW],
VIEWER: () => [Permission.VIEW],
});
When working with Tagged Unions
(or Discriminated Unions
), use exhaustive.tag
to inform what property to discriminate between union members:
interface Square {
kind: 'square';
size: number;
}
interface Rectangle {
kind: 'rectangle';
width: number;
height: number;
}
interface Circle {
kind: 'circle';
radius: number;
}
type Shape = Square | Rectangle | Circle;
const area = (s: Shape) => {
return exhaustive.tag(s, 'kind', {
square: (shape) => shape.size ** 2,
rectangle: (shape) => shape.width * shape.height,
circle: (shape) => Math.PI * shape.radius ** 2,
});
};
An overload is also available in the core exhaustive
function: by adding a third parameter to the function, Typescript will fallback to the Tagged Union overload.
exhaustive(s, 'kind', {
square: (shape) => shape.size ** 2,
rectangle: (shape) => shape.width * shape.height,
circle: (shape) => Math.PI * shape.radius ** 2,
});
PS: Note that TypeScript has a limitation inferring the Tagged Union overload via argument types because they are generic values. This means autocomplete for the Tagged Union keys will not exist until you declare an empty object as the third argument:
exhaustive(s, 'kind', {});
// ^ this will trigger the Tagged Union overload
This overload exists so you can use it at your own convenience, but if you prefer the better DX of inferred types from the start, calling exhaustive.tag
is still preferrable.
For every case checked, exhaustive
will narrow the type of input:
const getRoleLabel = (r: Role) =>
exhaustive(r, {
ADMIN: (role) => capitalize(role), // Admin
// ^? role is ADMIN
DEFAULT: (role) => capitalize(role), // Default
// ^? role is DEFAULT
VIEWER: (role) => capitalize(role), // Viewer
// ^? role is VIEWER
});
const area = (s: Shape) => {
return exhaustive.tag(s, 'kind', {
square: (shape) => shape.size ** 2,
// ^? shape is Square
rectangle: (shape) => shape.width * shape.height,
// ^? shape is Rectangle
circle: (shape) => Math.PI * shape.radius ** 2,
// ^? shape is Circle
});
};
If any corrupt values make to the exhaustive checker, it will throw a TypeError
at runtime. If you don't want exhaustive
to throw, you can provide a default fallback:
enum Food {
BANANA = 'BANANA',
SALAD = 'SALAD',
}
const getFoodType = (food: Food) => {
return exhaustive(food, {
BANANA: () => 'Fruit',
SALAD: () => 'Leaves',
_: () => 'Unknown',
});
};
Sometimes it's easier to work with switch statements, especially if you have a lot of cases that are falling-through to a common handler.
To enforce exhaustiveness checking inside switch
statements, use the corrupt
helper as your default
value, which will make TypeScript complain of unhandled cases, and throw at runtime if the default
case is reached:
import { corrupt } from "exhaustive";
type Day =
| 'Sunday'
| 'Monday'
| 'Tuesday'
| 'Wednesday'
| 'Thursday'
| 'Friday'
| 'Saturday';
const getLabelForDayOfWeek = (day: Day) => {
switch (day) {
case 'Monday':
case 'Tuesday':
case 'Wednesday':
case 'Thursday':
case 'Friday':
return 'Weekday';
case 'Saturday':
// case 'Sunday':
return 'Weekend';
default:
corrupt(day);
// ^? Argument of type 'string' is not assignable to parameter of type 'never'
}
};
1.1.1
d210075
Thanks @lukemorales! - Fix exhaustive compile checks
With the added support of exhaustive boolean checks, TypeScript stopped complaining if a key was missing in the exhaustive object due to how the new types were declared. The types were adjusted to bring back the expected behavior of TypesScript complaining at compile-time if you forget to handle all the use-cases.
FAQs
Exhaustiveness checking in TypeScript
The npm package exhaustive receives a total of 471 weekly downloads. As such, exhaustive popularity was classified as not popular.
We found that exhaustive demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.
Security News
Biden's executive order pushes for AI-driven cybersecurity, software supply chain transparency, and stronger protections for federal and open source systems.