
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Key based index store.
$ npm i key-index
Import
import keyIndex from "key-index"
Create an instance
let initer = (pointer: string) => {
return {name: pointer}
}
let index = keyIndex(initer)
When querying a key that is not assigned to a value yet, one is automatically created via the given initer function.
let a = index("keyA") // {name: "keyA"}
a.prop = "val"
index("keyA") // {name: "keyA", prop: "val"}
(Mostly for debugging purposes) you can also query the whole document
let a = index() // Map: {
// "keyA": {
// "name": "keyA"
// "prop": "val"
// }
// }
The index is stored in a Map by default. If youd like to use a regular object as index instead use
import { constructObjectIndex as keyIndex } from "key-index"
All functionality is the same here. The only difference is the underlying technology used.
Note: that native objects do only support strings | number | symbol as indices!
This is the default initer
keyIndex(/* () => {return {}} */)
You can use values directly. If your use case does only need one value.
let valueIndex = keyIndex((key) => key)
valueIndex("keyA") // "keyA"
In that (and every other) case you can change the value like so:
valueIndex("keyA", "keyAValue") // "keyAValue"
valueIndex("keyA") // "keyAValue"
If using your use case requires nested indices consider this
let nestedIndex = keyIndex(() => keyIndex(/* () => {return {}} */))
nestedIndex("keyA")("keyB") // {}
Querying the whole document does also work here
nestedIndex("keyA")("keyB").key = "val"
nestedIndex("keyA")("keyC").key = "val"
nestedIndex("keyD")("keyE").key1 = "val1"
nestedIndex("keyD")("keyE").key2 = "val2"
nestedIndex() // Map {
// "keyA": Map {
// "keyB": { key: "val" }
// "keyC": { key: "val" }
// }
// "keyD": Map {
// "keyE": { key1: "val1", key2: "val2" }
// }
// }
Note: Depending on the underlying technology (maps / objects) this may yield slightly different results (all maps would be regular objects).
The memoize function ensures that a given creator function is only executed once. Subsequent calls return the cached result. It is specifically designed to handle circular dependencies (cyclic calls) and supports post-initialization hooks.
Pass a function to memoize. The first call executes the function, and all future calls return the same value.
import { memoize } from "key-index"
const getComplexConfig = memoize(() => {
console.log("Calculating...")
return { status: "ready", timestamp: Date.now() }
})
getComplexConfig() // Logs "Calculating...", returns {status: "ready", ...}
getComplexConfig() // Returns cached object immediately
In complex systems, Function A might call Function B, which accidentally calls Function A again before it has finished. To prevent infinite loops (Stack Overflows), you can enable optimisticReturn.
If enabled, the function will return undefined for any recursive calls that occur while the creator is still running.
const serviceA = memoize(() => {
const b = serviceB()
return { name: "A", dependency: b }
}, true) // Enable optimistic return
const serviceB = memoize(() => {
const a = serviceA() // This would normally loop forever
return { name: "B", dependency: a } // 'a' will be undefined here
})
serviceA()
afterCreator)You can provide a callback as the second argument. This runs exactly once, immediately after the creator has successfully finished. This is useful for "wiring up" objects or triggering side effects after an instance is cached.
const getSocket = memoize(
() => new WebSocket("ws://link"),
(args, socket) => {
console.log("Socket initialized with args:", args)
socket.onopen = () => console.log("Connected")
}
)
If you initialized memoize with a boolean flag, the calling signature changes. The first argument becomes a toggle for that specific call, and the creator's arguments are passed as an array in the second argument.
const myMemo = memoize((name: string) => ({ name }), true)
// Syntax: myMemo(optimisticToggle?, [argsForCreator])
myMemo(true, ["MyName"])
The returned function also exposes its state:
isResolved: Boolean indicating if the creator has already run.cache: The stored result (if resolved).memoize| Feature | Description |
|---|---|
| Execution | The creator runs exactly once. |
| Arguments | Only the arguments from the first call are passed to the creator. |
| Cyclic Safety | Prevents crashes if the creator triggers itself. |
| Hook | afterCreator allows logic to run after the value is stored in the cache. |
All feedback is appreciated. Create a pull request or write an issue.
FAQs
Key based index store.
We found that key-index demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.