
Security News
Feross on TBPN: How North Korea Hijacked Axios
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.
A functional interface for information hiding and inheritance.
Murphy's Law: If there are two or more ways to do something, and one of those ways can result in a catastrophe, then someone will do it.
JavaScript does not provide an effective mechanism for encapsulating data.
"Classes" (and, in ECMAScript 6, the class keyword) do not provide syntactic
support for private or protected fields.
class Person {
constructor(name) {
this._name = name;
}
hello() {
console.log('Hi, my name is "' + this._name + '".');
}
}
function Person(name) {
this._name = name;
}
Person.prototype.hello = function () {
console.log('Hi, my name is "' + this._name + '".');
};
var joe = new Person('Joe');
console.log(joe._name); // "Joe"
It is a major shortcoming that _name is accessible from the outside, because
there is no reason for it to be, and it would be unreliable for a programmer to
depend on its accessibility.
To achieve privacy, one must use var.
function Person(options) {
var name = options.name;
this.hello = function () {
console.log('Hi, my name is "' + name + '".');
};
}
But the data cannot be shared by inheritors.
class Mayor extends Person {
constructor() {
this.hello = function () {
// ReferenceError: name is not defined
console.log('Good day, citizen! My name is "' + name + '".');
};
}
}
We want "protected" data that can be accessed by the lineage but is inaccessible to the outside world.
Meet Murphy:
var makeConstructor = murphy();
var makePerson = makeConstructor(null, function (self, options) {
self.protected.name = options.name;
self.public.hello = function () {
console.log('Hi, my name is "' + self.protected.name + '".');
};
});
var makeMayor = makeConstructor(makePerson, function (self, options) {
self.public.hello = function () {
console.log('Good day, citizen! My name is "' + self.protected.name + '".');
};
});
var person = makePerson({
name: 'Joe'
});
person.hello(); // Hi, my name is "Joe".
console.log(person.name); // undefined
var mayor = makeMayor({
name: 'Bob'
});
mayor.hello(); // Good day, citizen! My name is "Bob".
console.log(mayor.name); // undefined
With Murphy, you don't need "prototypal" constructors, new, this, or even
the class keyword or () => {} ("fat arrow" functions). All you need is
makeConstructor and function.
With Murphy, you can build extensible interfaces that don't expose private
data. Thanks to encapsulation, the things that can go wrong when
_pinkyPromises are $$violated, cannot go wrong.
Browser:
bower install --save murphy
<script src="bower_components/murphy/murphy.js"></script>
Node:
npm install --save murphy
Via browser global:
var makeConstructor = murphy();
AMD:
require(['murphy'], function (murphy) {
var makeConstructor = murphy();
});
CommonJS:
var murphy = require('murphy');
var makeConstructor = murphy();
To run tests in Node.js:
npm test
To run tests in a browser, open test.html.
MIT.
FAQs
Prevent things that can go wrong from going wrong.
We found that murphy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.

Security News
OpenSSF has issued a high-severity advisory warning open source developers of an active Slack-based campaign using impersonation to deliver malware.

Research
/Security News
Malicious packages published to npm, PyPI, Go Modules, crates.io, and Packagist impersonate developer tooling to fetch staged malware, steal credentials and wallets, and enable remote access.