
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
pump-requests
Advanced tools
Let's say we have an endpoint, which receives list of ids as a parameter to check their status (for example, list of favourites). However, we would like to call status of each item individually (think about React component, which will get all needed information for a component). This library does exactly one thing – it allows you to treat such requests as they were requests to check status of a single item. They are added into internal data structures, and each addition triggers debounced timer, so after defined time of silence it will invoke given function, passing list of all ids it collected.
import pumpRequests from 'pump-requests';
import api from '../api';
// you can pass this function wherever you want
// if you use redux, you can pass it to the
// middleware
const checkFavourite = pumpRequests(ids => {
return api.get('/favourites', ids);
// for instance, { 5: 'some', 10: 'another' }
});
checkFavourite(5).then(val => console.log(val)); // 'some'
checkFavourite(10).then(val => console.log(val)); // 'another'
import pumpRequest from 'pump-requests';
const checkFavourite = pumpRequest(
// this function will be invoked with array of parameters,
// with which `checkFavourite` was called by individual items
fn: (ids) => api.get(...),
{
// debounce time – after which period of silence we will call fn
// default value is 50
time: 100,
// function to get information for specific call
// results – data from fn
// id – parameter with which you called `checkFavourite`
//
// default value is (results, id) => results[id],
// so, it means you have to pass string as an id, and
// resolve object from fn with ids as keys
parseParams: (results, id) => ...
}
);
There is nothing more! The idea for the library was born when I was struggling trying to prefetch different favourites in several places, and they clashed – I feel that treating them as independent single requests with single responsibility is a right way to go.
MIT
FAQs
Library to treat a single request with multiple ids as many separate
We found that pump-requests demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.