Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
is-immutable-type
Advanced tools
Test the immutability of TypeScript types.
Any donations would be much appreciated. 😄
# Install with npm
npm install is-immutable-type
# Install with yarn
yarn add is-immutable-type
import { getTypeImmutableness, Immutableness, isReadonlyDeep, isUnknown } from "is-immutable-type";
import type ts from "typescript";
function foo(checker: ts.TypeChecker, node: ts.Node) {
const nodeType = checker.getTypeAtLocation(node);
const constrainedNodeType = checker.getBaseConstraintOfType(nodeType);
const immutableness = getTypeImmutableness(checker, constrainedNodeType);
if (isUnknown(immutableness)) {
console.log("`immutableness` is `Unknown`").
} else if (isReadonlyDeep(immutableness)) {
console.log("`immutableness` is `ReadonlyDeep` or `Immutable`").
} else {
console.log("`immutableness` is `ReadonlyShallow` or `Mutable`").
}
}
Tip: You can also use comparator expression (such as >
and <
) to compare
Immutableness
.
Note: Immutableness.Unknown
will always return false
when used in a
comparator expression. This includes ===
- use isUnknown()
if you need to
test if a value is Unknown
.
Immutable
: Fully, deeply readonly. Everything is read only and nothing can be modified.ReadonlyDeep
: The data is deeply immutable but methods are not.ReadonlyShallow
: The data is shallowly immutable, but at least one deep value is not.Mutable
: The data is shallowly mutable.Unknown
: We couldn't determine the immutableness of the type.Note: Internally Unknown
may also be used to mean that we are still
calculating the immutableness of the type. This shouldn't be exposed to the
outside world though.
Sometimes we cannot correctly tell what a type's immutableness is supposed to be just by analyzing its type makeup. One common reason for this is because methods may modify internal state and we cannot tell this just by the method's type. For this reason, we allow types to be overridden.
To override a type, pass an overrides
array of all the override
objects you
want to use to your function call. You can either override a type by name
or
by a regex pattern
. Specify a to
property with the new immutableness value
that should be used. Additionally you may also only override a type if it is
calculated to have a certain immutableness by specifying a from
property.
Always treat ReadonlyArray
s as Immutable
[{ name: "ReadonlyArray", to: Immutableness.Immutable }]
Treat ReadonlyArray
s as Immutable
instead of ReadonlyDeep
. But if the
instance type was calculated as ReadonlyShallow
, it will stay as such.
[{ name: "ReadonlyArray", to: Immutableness.Immutable, from: Immutableness.ReadonlyDeep }]
By default the types Map
and Set
are overridden to be Mutable
.
If you know of any other internally defined TypeScript types that need to be overridden, please open an issue.
Note: When providing custom overrides, the default ones will not be used. Be
sure to include the default overrides in your custom overrides if you don't want
to lose them. You can obtain them with getDefaultOverrides()
.
Currently due to limitations in TypeScript, it is impossible to write a utility type that will transform any given type to an immutable version of it in all cases. (See this issue)
One popular implementation of such a utility type is
type-fest's
ReadonlyDeep
type. If you want this library to treat types wrapped in ReadonlyDeep
as
immutable regardless, you can provide an override stating as such.
[{ pattern: /^ReadonlyDeep<.+>$/u, to: Immutableness.Immutable }]
Currently we cannot process alias types that simply rename one alias to another.
For example, if we have the following code:
type A = { foo: "bar" };
type B = A; // This is a "rename" alias.
We cannot override B
to be treated differently to A
.
This is because, internally, TypeScript discards B
and just uses A
.
By default we use a global cache to speed up the calculation of multiple types' immutableness. This prevents us from needing to calculate the immutableness of the same types over and over again.
However, this cache assumes you are always using the same type checker. If you
need to use multiple (such as in a testing environment), this can lead to
issues. To prevent this, you can provide us with a custom cache (by passing a
WeakMap
) to use or tell us to use a temporary cache (by passing false
).
FAQs
Check the immutability of TypeScript types
We found that is-immutable-type demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.