Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
mixin-decorator
Advanced tools
This is a simple decorator function for mixing in behaviors from other sources. It can be called multiple times or passed multiple behaviors. It is useful for React components because it allows multiple definitions of the same method for methods that return undefined. So you can have mixins that tap into the component lifecycle without breaking each other.
npm install -S mixin-decorator
// behaviors/hello.js
const hello = {
hello(){
console.log("hello world")
}
}
export default hello
import mixin from "mixin-decorator"
import hello from "./behaviors/hello.js"
@mixin(hello)
class Hello{
}
var obj = new Hello()
obj.hello() //output: hello world
mixin-decorator let's multiple mixins declare the same method. This is great for letting mixin's tap into React's lifecycle.
import React from "react"
import mixin from "mixin-decorator"
const behavior1 ={
componentDidMount(){
console.log("behavior1 tapped into componentDidMount")
}
}
const behavior2 ={
componentDidMount(){
console.log("so did behavior2")
}
}
@mixin(behavior1, behavior2)
class MyComponent extends React.Component {
componentDidMount(){
console.log("i'm a component")
}
render(){
return <div>Hello</div>
}
}
When MyComponent is mounted the console would have 3 logs:
i'm a component
behavior1 tapped into componentDidMount
so did behavior2
@mixin(...behaviors)
It accepts one or more objects full of behaviors to mix in. If your mixins have definitions of the same method and you care about the order they are called in, use this style as they will be called in the order specified.
@mixin(helloWorld, edit)
class Hello {
It can also be stacked. If your mixins declare the same method be aware that
they will be called in reverse order when using this style. This is because it
is equivalent to this mixin(edit)(Hello); mixin(helloWorld)(Hello)
@mixin(helloWorld)
@mixin(edit)
class Hello {
FAQs
A decorator for mixins that doesn't overwrite existing methods
We found that mixin-decorator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.