
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
gate-executor
Advanced tools
Execute functions that return via callback in order, but pause if a function is marked as a gate.
A work execution queue that provides tracing and gating. Work functions can have optional callbacks. Timeouts are triggered when execution does not complete within a specified time.
Gating places execution into a serial mode, where all gated work functions must complete in order before other work functions in the queue are called. The gate can be ignored.
Used by Seneca micro-service communication to execute tasks in order. If you haven't heard about Seneca, check out the getting started guide.
If you're using this module, feel free to contact me on twitter if you have any questions! :) @rjrodger
The gate executor provides functionality to pause gated tasks and to quit tasks that exceed a given timeout. The executor can be created with a few options:
var e0 = executor({
trace: true, // Error logging trace, default false
timeout: 150, // Timout for tasks, default 3333
error: function() {...}, // A function to wrap all errors in, default noop
stubs: { // Stubs to substitute default node functions
now: {...},
setTimeout: {...},
clearTimeout: {...}
}
})
When calling the executor with a task, use the following pattern:
e0.execute({
id: 'a', // Optional identifier for trace
fn: function() {...} // Function to be preformed
cb: function(err, out) {...}
})
The worker definition object has the following properties:
npm test
FAQs
A work queue that can be gated, stopping to wait for sub-queues to complete.
The npm package gate-executor receives a total of 4,382 weekly downloads. As such, gate-executor popularity was classified as popular.
We found that gate-executor demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.