
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A no-dependency library for resolving promises with concurrency limits. I concur!
iconcur is a concurrency limiting library for Promises. If you're ready to stop pegging your processor or client's browser with millions of concurrent promises, then look no further. You think this is a great idea. I concur!
The simplest way to use iconcur is with this mapping function.
import { mapWithConcurrency } from 'iconcur';
const promiseFns = new Array(1000000)
.fill(null)
.map((_, i) => () => Promise.resolve(i));
const concurrencyLimitedResolvedPromises = await mapWithConcurrency(
promiseFns,
2
);
Pools are good general-purposes concurrency controllers. You can specify a certain concurrency limit when you generate a pool, and when you pass a generated pool object a list of promises, it will continuously resolve promises at the concurrency limit until they are all completely settled.
This controller supports cancellation. Cacellation does not halt execution of pending promises.
More features are planned for this controller. However, for now, the only difference between using this and using mapWithConcurrency is cancellation support.
import iconcur from 'iconcur';
const pool = iconcur.pool(2);
const promiseFns = new Array(1000000)
.fill(null)
.map((_, i) => () => Promise.resolve(i));
const promises = pool(promiseFns);
// By calling promises.all(), the promises begin execution.
const resolvedPromises = promises.all();
promises.cancel();
Note: Having multiple instances of pool(fns) will result in a seperate concurrency limitation context for each one.
const pool = iconcur.pool(2);
const firstFns = [...];
const secondFns = [...];
const firstPromises = pool(firstFns);
const secondPromises = pool(secondFns);
// This results in a total concurrency limit of 4
// instead of 2.
firstPromises.all();
secondPromises.all();
Generators are useful for when you want the execution of your concurrent promises to come up for air every once in a while and allow you to operate on the data in some grouping of settled promises before the entire array of promises is settled.
This controller supports cancellation. Cacellation does not halt execution of pending promises.
import iconcur from 'iconcur';
const generator = iconcur.generator(2);
const promiseFns = new Array(1000000)
.fill(null)
.map((_, i) => () => Promise.resolve(i));
const promises = generator(promiseFns);
// By calling promises.all(), the promises begin execution.
// This will resolve promises in partitions by the given
// concurrency limit.
// This can be inconvenient if a grouping of promises includes
// one long-running promise, as execution of another batch
// will be deferred until the long-running promise of the current
// batch settles.
const resolvedPromises = promises.all();
// Generators are also cancellable.
promises.cancel();
// Another way to begin execution is with .next()
const promises2 = generator(promiseFns);
while (!promises2.isFinished()) {
// The same caveat regarding long-running promises
// still applies here.
const someDateToOperateOn = await promises2.next();
// Do something with someDateToOperateOn
}
As with pool, having multiple instances of generator(fns) will result in a different concurrency limitation context for each one. Be careful!
FAQs
A no-dependency library for resolving promises with concurrency limits. I concur!
We found that iconcur demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.