Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
flux-constant
Advanced tools
Unique constants for Flux apps.
$ npm install flux-constant
Create constants one at a time.
var FluxConstant = require('flux-constant');
var IMPORTANT_THING = new FluxConstant('IMPORTANT_THING');
console.log(IMPORTANT_THING);
// { name: 'IMPORTANT_THING' }
console.log(IMPORTANT_THING.toString());
// IMPORTANT_THING
Or create a set of them.
var FluxConstant = require('flux-constant');
var Set = FluxConstant.set([
'SEND_REQUEST',
'RECEIVE_RESPONSE'
]);
console.log(Set);
/*
{
SEND_REQUEST: { name: 'SEND_REQUEST' },
RECEIVE_RESPONSE: { name: 'RECEIVE_RESPONSE' }
}
*/
console.log(Set.SEND_REQUEST instanceof FluxConstant);
// true
With a Flux application you may have a set of constants such as:
var ContactConstants = {
ActionTypes: {
SEND_REQUEST: 'SEND_REQUEST',
RECEIVE_RESPONSE: 'RECEIVE_RESPONSE'
}
};
module.exports = ContactConstants;
You may have another set of constants that are really similar, but unreleated.
var SignupConstants = {
ActionTypes: {
SEND_REQUEST: 'SEND_REQUEST',
RECEIVE_RESPONSE: 'RECEIVE_RESPONSE'
}
};
module.exports = SignupConstants;
We just created action types that could collide though. Let's compare a bit:
var ContactConstants = require('./ContactConstants');
var SignupConstants = require('./SignupConstants');
ContactActionTypes = ContactConstants.ActionTypes;
SignupActionTypes = SignupConstants.ActionTypes;
console.log(ContactActionTypes.SEND_REQUEST === SignupActionTypes.SEND_REQUEST);
// true
That's not exactly what we wanted. This could bite us if we use these two sets of constants in the same process.
For example, if a Flux store was depending on these constants, it may take action on a payload it didn't intend to. This happens because we're just comparing strings.
One way to fix this is creating longer, more unique names:
var ContactConstants = {
ActionTypes: {
CONTACT_SEND_REQUEST: 'CONTACT_SEND_REQUEST',
CONTACT_RECEIVE_RESPONSE: 'CONTACT_RECEIVE_RESPONSE'
}
};
module.exports = ContactConstants;
This doesn't seem like a great way to move forward though. These names can get
out of control as the application grows. Also, prefixing with CONTACT_
feels
like duplicating unnecessary information.
So instead of passing around strings let's create objects that are unique
(new
). And best of all we can keep the simpler naming conventions.
var FluxConstant = require('flux-constant');
var ContactConstants = {
ActionTypes: {
SEND_REQUEST: new FluxConstant('SEND_REQUEST'),
RECEIVE_RESPONSE: new FluxConstant('RECEIVE_RESPONSE')
}
};
module.exports = ContactConstants;
We'll do the same thing as above but demonstrate the set
shortcut.
var FluxConstant = require('flux-constant');
var SignupConstants = {
ActionTypes: FluxConstant.set([
'SEND_REQUEST',
'RECEIVE_RESPONSE'
])
};
module.exports = SignupConstants;
And now they won't collide.
var ContactConstants = require('./ContactConstants');
var SignupConstants = require('./SignupConstants');
ContactActionTypes = ContactConstants.ActionTypes;
SignupActionTypes = SignupConstants.ActionTypes;
console.log(ContactActionTypes.SEND_REQUEST === SignupActionTypes.SEND_REQUEST);
// false
MIT
What you create with flux-constant
is more important than flux-constant
.
FAQs
Unique constants for Flux apps.
The npm package flux-constant receives a total of 12 weekly downloads. As such, flux-constant popularity was classified as not popular.
We found that flux-constant demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.