
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Hyperwrap (inspired by hyperapp) turns react into a simple to use functional framework.
The easiest way to get going is to install the seed project using douglas.
douglas installs npm modules as ready to roll projects...
If you don't have douglas, install globally with npm i -g douglas
Install hyperwrapped-react (seed project)
douglas get hyperwrapped-react
If you haven't used parcel-bundler before, then install globally with
npm i -g parcel-bundler... then ...
npm start
Hyperwrap is an app function that wraps around React.
When Hyperwrap's state changes - it rerenders React.
A typical entry index.tsx looks like...
import { app } from "hyperwrap";
import { initialState } from "./src/state/state";
import { View } from "./src/components/view/view.component";
app(initialState, View, document.getElementById('app'));
initialState is just a plain js object.
View is just a plain React functional component
Let's say our initialState is ...
{
thing: 'not bob',
anotherThing: 'something else'
}
The following component illustrates how to interact with state using getState and updateState...
import * as React from 'react';
import { State } from '../../../state/state';
import { getState, updateState } from 'hyperwrap';
export const Home = () => {
const changeThing = (e: any, thing: string) => { updateState('thing', thing); };
return (
<div>
<p>{getState().thing}</p>
<button onClick={(e) => {changeThing(e, 'bob')} }>push</button>
</div>
);
};
Note that even though we update
state.thingto 'bob',state.anotherThingremains unaffected.
changeThing to it's own modulestate and actions optional props to our functional component.state and actions.Our component is now a pure function. It relies entirely on what is passed into it. It doesn't create any direct side effects. This means we can inject mock values for state and actions, for easier testing.
interface Props {
state?: State;
actions?: { [key: string]: any }
}
const actionsCollection = {
changeThing: changeThing
}
export const Home = (
{state, actions}: Props = {
state: getState(),
actions: actionsCollection
}
) => {
const _state = state || getState();
const _actions = actions || actionsCollection;
return (
<div>
<p>{_state.thing}</p>
<button onClick={(e) => {_actions.changeThing(e, 'bob')} }>push</button>
</div>
);
};
To update state, specify the node in the state object to update, followed by the value.
updateState('deep/nested/thing', newValue);
Adding nodes - Use the above. If parent nodes aren't created yet, they will be created for you.
Deleting nodes - Make the newValue undefined. Any parent nodes will also be removed if they do not have children.
By default hyperwrap rerenders an app on state change.
There will be times however where this is not ideal.
Instead pass the { rerender: false } flag to stop the app from rerendering...
updateState('deep/nested/thing', newValue, {rerender: false});
The following can be used to update multiple state nodes, before re-rendering...
updateMulti([
{ node: 'deep/nested/thing', updateValue: newValue1 },
{ node: 'another/deep/nested/thing', updateValue: newValue2 }
]);
Again, if you don't want to rerender after the state updates - pass the { rerender: false } flag.
e.g.
updateMulti([
{ node: 'deep/nested/thing', updateValue: newValue1 },
{ node: 'another/deep/nested/thing', updateValue: newValue2 }
], {
rerender: false
});
FAQs
Makes React simple and functional
We found that hyperwrap demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.