
Security News
PodRocket Podcast: Inside the Recent npm Supply Chain Attacks
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
Experimental bridge between MobX and Yjs. [Demo + Playground on CodeSandbox](https://codesandbox.io/s/moby-demo-yn42g?file=/src/App.tsx).
Experimental bridge between MobX and Yjs. Demo + Playground on CodeSandbox.
Although Yjs is great for data syncing, observing changes to your data model can be quite cumbersome. You'd need to manually call observe
to keep updated of (incoming) changes and keep the rest of your application in sync.
MobY brings the reactive data model of MobX to Yjs. Combine best of both worlds:
Set up your yJS document (same as plain-yJS):
const ydoc = new Y.Doc();
const provider = new WebrtcProvider("doc", ydoc);
Call observeYJS to patch the document. From now on, ydoc
will be compatible with MobX observers:
observeYJS(ydoc);
Use the Yjs document somewhere in an observer, for example using MobX autorun
:
autorun(() => {
console.log(ydoc.getMap("data").get("magicnumber")); // automatically log the Yjs value once it's updated
})
Or use mobx-react-lite to automatically rerender your React components.
Playground on CodeSandbox. Open multiple windows and click the button to see the magic.
FAQs
Experimental bridge between MobX and Yjs. [Demo + Playground on CodeSandbox](https://codesandbox.io/s/moby-demo-yn42g?file=/src/App.tsx).
We found that mobyjs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.