
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
redux-elm-subscriptions
Advanced tools
A tiny, zero-dependency package to listen to global events in an Elm Architecture manner.
Listen to global events Elm Style.
npm i -S redux-elm-subscriptions
When creating components you most likely wanna keep your components dumb and not use lifecycle hooks which couples rendering to functionality. This package revolves around the idea that some of the events you listen to are global and come from a world "outside" of your application like:
So instead of this in a component file ...
componentDidMount() {
document.addEventListener('keydown', handlekeyDown);
}
componentWillUnmount() {
document.removeEventListener('keydown', handlekeyDown);
}
you can do this in a central place in your code ...
import { createSubsriptions, subNone } from 'redux-elm-subscriptions';
...
// will be called every time the state changes
const mapStateToSubs = (state, dispatch) => {
// each subscription function needs to set up the subscription and return
// a function to unsubscribe
const arrowKeysSub = () => {
const handler = e => {
if (e.keyCode === 32) {
dispatch({ action: 'SPACE_PRESS' });
}
};
document.addEventListener('keydown', handler);
return () => {
document.removeEventListener('keydown', handler);
};
};
const listenToClicks = () => {
const handler = () => { dispatch({ type: 'DOCUMENT_CLICK' }); };
document.addEventListener('click', handler);
return () => { document.removeEventListener('click', handler); };
};
// return an object of subscriptions
return {
arrowKeys: arrowKeysSub,
anotherSubscriptions: () => {
// subscribe here
return () => {
// unsubscribe here
};
},
// only listen to clicks when the modal is open
documentClick: state.modalOpen ? listenToClicks : subNone,
};
};
// add them to the store
store.subscribe(createSubscriptions(store)(mapStateToSubs));
Also check out the example.
The API is designed so you can control listening behavior based on your state
.
Your subscription function receives the state
and dispatch
as parameters and
should start listening to some event in the world. After that it needs to return
a function to unsubscribe from the event you just started listening to. The
function will be called every time the state changes. If a subscription is no
longer present in the returned object, the unsubscribe function will be called
automatically.
As long as yo make sure that your functions return functions to unsubscribe, everything should be handled automatically for you.
This lib was build to listen events which happen outside the scope of your app. Don't use it for one-time things are things that involve performing other work. Those will be better served by a library like redux-loop. Examples that are not subscriptions but effects include:
Also, of course the subscriptions are only for global events. DOM Events that happen within the virtual DOM that is managed by your app, should be handled directly in your components.
Check out the source. It's very simple, less than 30 LOC and needs no dependencies.
FAQs
A tiny, zero-dependency package to listen to global events in an Elm Architecture manner.
The npm package redux-elm-subscriptions receives a total of 6 weekly downloads. As such, redux-elm-subscriptions popularity was classified as not popular.
We found that redux-elm-subscriptions demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.