Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Package for creating Isolated event buses for namespacing events in the browser.
This front-end package provides you with a EventBus factory function (that acts more or less like a Class in this case), to create isolated event bus messaging systems, where a "event bus" is a channel of communication using events between different components for all sorts of reasons from doing Reactive programming to simple data synchronization. Effectively bringing namespacing to event communication channels on the web's front-end.
This package is created despite having DOM events already, because its hard to isolate these events into different/seperate channels, and to manage them seperately is a nightmare for developers. What's more frustrating is that when you have duplicate events from different components which makes the whole process more difficult. Thus this package is created to make life easier.
This project follows Semantic Versioning
This project is currently actively maintained and is marked in Beta phase. Although this package is mostly stable and has been tested in 1 production level code, it is stilled marked as Beta since the unit tests have no been completed yet. Once all the tests has been written and a CI/CD pipeline is built out for this package, I will create a new Major version for release that will be marked as "Production Ready". If you have any issues, please open them on the Github page, contributions or comments are all welcomed too. My email is here if you would like to reach out. Thanks for giving this a try!
Please view the documentation of latest changes in this CHANGELOG.md file on the Github repository to see what has changed in the latest versions!
Please visit the Github repo for latest and most updated commits/changes. Versions published on NPM are more or less stable for use and are not updated as often as the remote repo.
If you plan on using this package in production, or share code that uses this package as dependency with others, always make sure that your code is working fine with the package using your tests, before locking the version you used in your dependency list. This is to prevent the package from being updated causing errors due to any possible breaking changes across the different versions, which may break your application, causing pain and tears.
Installing with "npm" is easy:
npm i ieventbus
You can also choose to install from source:
// Clone the repository from Github
git clone https://github.com/Jaimeloeuf/iEventBus
// Navigate to the directory cloned into
cd iEventBus
// Install package locally into the same directory
npm i .
// Install package globally
npm i -g .
Browser coverage -> Only tested on chrome >= v75.0.0.
This package should however, work with majority of browsers with no issues, as it is essentially a nice and simple wrapper over the standard browser based DOM events API.
This package does not have any external dependencies other than the DOM provided by the Browser.
This package is made under the MIT license, feel free to use it however you like.
Feel free to fork and contribute to this project! If you need help or have any queries, feel free to reach out to me here, or simply create an issue on the Github page.
2019 - Jaime Loeuf
[0.1.1] - 21/07/19
FAQs
Package for creating Isolated event buses for namespacing events in the browser.
The npm package ieventbus receives a total of 1 weekly downloads. As such, ieventbus popularity was classified as not popular.
We found that ieventbus demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.