Security News
Supply Chain Attack Detected in @solana/web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Wrapper around localStorage to easily store JSON objects.
Supports:
If you want to store client-side data for your website, the way to do it is with localStorage. However, there is at least one siginificant downside: you can only store strings in localStorage keys.
The best way to get around this is by storing a stringified JSON object in a key, but doing this manually or having to call a function that does it for you any time you change an object would be annoying.
This library solves these problems using JS proxies.
It also has great IDE support thanks to it being written in TypeScript.
You can also use it with vanilla JS with the Webpacked file (ls-proxy.user.js
),
which is useful to test it in the browser or while writing UserScripts.
Here's all it takes to store a stringifed JSON object in localStorage and automatically change it:
import { storeObject } from 'ls-proxy'
const someInfo = storeObject(
// The localStorage key to save data under
'someInfo',
// The object to store
{
aString: 'Hello, World!',
aNumber: 123,
aBoolean: true,
aList: [1, '2', 3],
},
)
someInfo.aNumber = 42 // Updates localStorage
console.log(someInfo.aList) // Reads from localStorage
Documentation for the main branch is hosted at https://ls-proxy.adamts.me.
Documentation can be built from a cloned repository by running yarn doc
.
Examples are located in examples
.
To use in a Node project, add ls-proxy as a dependency.
# npm
npm install ls-proxy
# yarn
yarn add ls-proxy
You can then import and use functions:
import { storeObject } from 'ls-proxy'
const myObj = storeObject('myObj', {
name: 'John',
age: 21,
})
myObj.name = 'Joe'
myObj.age++
In a UserScript that isn't built with some build tool, you can @require
the library:
// @require https://gitlab.com/MysteryBlokHed/ls-proxy/-/raw/main/ls-proxy.user.js
You can replace main
with a specific release tag like v0.1.0
to require a specific version:
// @require https://gitlab.com/MysteryBlokHed/ls-proxy/-/raw/v0.1.0/ls-proxy.user.js
Functions are available on the global LSProxy
object:
const { storeObject } = LSProxy
const myObj = storeObject('myObj', {
name: 'John',
age: 21,
})
myObj.name = 'Joe'
myObj.age++
The types included with the npm package still work when the library is @require
'd.
Just add the types as a dev dependency for a Node project or install them globally.
With the package installed, include the following reference line somewhere in your TypeScript source file:
/// <reference types="ls-proxy" />
Building this project requires Node.js and Yarn. To install dependencies, run:
yarn install
To build the project, run:
yarn build
To automatically build when a source file is modified, run:
yarn dev
Built JS files and type declarations will be placed in the lib/
directory,
and the UserScript will be placed in the root. The package.json
file is configured
to publish files in the lib/
directory to npm.
To test the project, run:
yarn test
This project uses Jest for tests.
This project is licensed under either of
at your option.
This project was created from a template licensed under the MIT license (LICENSE or http://opensource.org/licenses/MIT).
FAQs
Wrapper around localStorage (and other stores) to easily store JSON objects
The npm package ls-proxy receives a total of 1 weekly downloads. As such, ls-proxy popularity was classified as not popular.
We found that ls-proxy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.