Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
The pify npm package is a utility module that converts callback-based functions or methods to return Promises. This is particularly useful when working with older Node.js or JavaScript libraries that do not natively support Promises, allowing developers to write cleaner, more modern asynchronous code using async/await or .then() chaining.
Promisifying a single function
This code sample demonstrates how to promisify Node.js's fs.readFile function using pify. The resulting readFileAsync function returns a Promise that resolves with the file's contents or rejects with an error.
const pify = require('pify');
const fs = require('fs');
const readFileAsync = pify(fs.readFile);
readFileAsync('file.txt', 'utf8').then(data => {
console.log(data);
}).catch(error => {
console.error(error);
});
Promisifying an entire module
This code sample shows how to promisify all the functions of the fs module. After promisification, methods like fs.readFile return Promises.
const pify = require('pify');
const fs = pify(require('fs'));
fs.readFile('file.txt', 'utf8').then(data => {
console.log(data);
}).catch(error => {
console.error(error);
});
Custom promisification options
This code sample illustrates how to use pify with custom options. The 'exclude' option prevents certain functions from being promisified, while 'multiArgs' allows the promise to resolve with an array of values if the original callback returns multiple arguments.
const pify = require('pify');
const someModule = require('some-module');
const promisifiedModule = pify(someModule, {
exclude: ['nonAsyncFunction'],
multiArgs: true
});
promisifiedModule.someFunction().then(result => {
const [firstResult, secondResult] = result;
console.log(firstResult, secondResult);
});
Built into Node.js, util.promisify is a core method that converts a callback-based function into a Promise-based one. It is similar to pify but does not offer the same level of customization, such as excluding functions or handling multiple callback arguments.
Bluebird is a comprehensive promise library that includes a promisify and promisifyAll method, which are similar to pify's functionality. Bluebird promises offer additional features such as cancellation, progress, and long stack traces, which pify does not.
The es6-promisify package is another alternative that converts callback-based functions into Promises. It is similar to pify but with a slightly different API and does not provide as many options for customization.
Promisify a callback-style function
npm install pify
import fs from 'fs';
import pify from 'pify';
// Promisify a single function.
const data = await pify(fs.readFile)('package.json', 'utf8');
console.log(JSON.parse(data).name);
//=> 'pify'
// Promisify all methods in a module.
const data2 = await pify(fs).readFile('package.json', 'utf8');
console.log(JSON.parse(data2).name);
//=> 'pify'
Returns a Promise
wrapped version of the supplied function or module.
Type: Function | object
Callback-style function or module whose methods you want to promisify.
Type: object
Type: boolean
Default: false
By default, the promisified function will only return the second argument from the callback, which works fine for most APIs. This option can be useful for modules like request
that return multiple arguments. Turning this on will make it return an array of all arguments from the callback, excluding the error argument, instead of just the second argument. This also applies to rejections, where it returns an array of all the callback arguments, including the error.
import request from 'request';
import pify from 'pify';
const pRequest = pify(request, {multiArgs: true});
const [httpResponse, body] = await pRequest('https://sindresorhus.com');
Type: Array<string | RegExp>
Methods in a module to promisify. Remaining methods will be left untouched.
Type: Array<string | RegExp>
Default: [/.+(?:Sync|Stream)$/]
Methods in a module not to promisify. Methods with names ending with 'Sync'
are excluded by default.
Type: boolean
Default: false
If the given module is a function itself, it will be promisified. Enable this option if you want to promisify only methods of the module.
import pify from 'pify';
function fn() {
return true;
}
fn.method = (data, callback) => {
setImmediate(() => {
callback(null, data);
});
};
// Promisify methods but not `fn()`.
const promiseFn = pify(fn, {excludeMain: true});
if (promiseFn()) {
console.log(await promiseFn.method('hi'));
}
Type: boolean
Default: true
Whether the callback has an error as the first argument. You'll want to set this to false
if you're dealing with an API that doesn't have an error as the first argument, like fs.exists()
, some browser APIs, Chrome Extension APIs, etc.
Type: Function
Custom promise module to use instead of the native one.
util.promisify
?util.promisify
.multiArgs
).Class methods are not bound, so when they're not called on the class itself, they don't have any context. You can either promisify the whole class or use .bind()
.
import pify from 'pify';
import SomeClass from './some-class.js';
const someInstance = new SomeClass();
// ❌ `someFunction` can't access its class context.
const someFunction = pify(someClass.someFunction);
// ✅ The whole class is promisified and the `someFunction` method is called on its class.
const someClassPromisified = pify(someClass);
someClassPromisified.someFunction();
// ✅ `someFunction` is bound to its class before being promisified.
const someFunction = pify(someClass.someFunction.bind(someClass));
pify
choosing the last function overload when using it with TypeScript?If you're using TypeScript and your input has function overloads, then only the last overload will be chosen and promisified.
If you need to choose a different overload, consider using a type assertion:
function overloadedFunction(input: number, callback: (error: unknown, data: number => void): void
function overloadedFunction(input: string, callback: (error: unknown, data: string) => void): void {
/* … */
}
const fn = pify(overloadedFunction as (input: number, callback: (error: unknown, data: number) => void) => void)
// ^ ? (input: number) => Promise<number>
FAQs
Promisify a callback-style function
The npm package pify receives a total of 54,369,812 weekly downloads. As such, pify popularity was classified as popular.
We found that pify demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.