
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Ferp is the easiest, functional-reactive, zero dependency javascript app framework for nodejs and modern browsers.
Like any great idea, it's based on other (much smarter) people's work, namely:
npm install --save ferp
Or grab it from unpkg
<script src="https://unpkg.com/ferp"></script>
<script>
const { ferp } = window;
</script>
// es6
import { app, effects } from 'ferp';
// unpkg
import { app, effects } from 'https://unpkg.com/ferp?module=1';
// from a script tag
// <script src="https://unpkg.com/ferp"></script>
const { app, effects } = window.ferp;
// es5/node
const { app, effects } = require('ferp');
See this handy migration guide!
Here's an app that infinitely adds a counter, and logs it.
const ferp = require('ferp');
const initialState = 0;
const incrementAction = (state) => [state + 1, ferp.effects.act(incrementAction)];
ferp.app({
init: [initialState, ferp.effects.act(incrementAction)],
});
Every app needs an init
tuple, with the initial state, and initial side effect (or ferp.effects.none()
if there isn't one).
There is also a subscribe
method for managing long-term side-effects, like intervals or websocket communication, and observe
to watch for application changes.
You can read more about setting up an application here in the docs.
FAQs
Build functional and pure applications in NodeJS and the Browser!
The npm package ferp receives a total of 2 weekly downloads. As such, ferp popularity was classified as not popular.
We found that ferp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.