
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
redux-user-timing
Advanced tools
User Timing middleware for profiling redux application
Measuring performance is crucial for optimizing the application. Using with User Timing API, You can inspect performance about each dispatched redux action. For more details, check out Carl Vitullo's Blog: Performance Profiling a Redux App.
$ npm i redux-user-timing
Alternatively, using yarn:
$ yarn add redux-user-timing
Then enable redux-user-timing with applyMiddleware()
import { createStore, applyMiddleware } from 'redux';
import userTiming from 'redux-user-timing';
import rootReducer from './reducers';
const store = createStore(rootReducer, applyMiddleware(userTiming));
Please, use this middleware only for development environment.
configureStore.js
import { createStore, applyMiddleware } from 'redux';
import userTiming from 'redux-user-timing';
import rootReducer from './reducers';
const configureStore = initialState => {
const middlewares = [
/* Some other middlewares */
];
if (process.env.NODE_ENV !== 'production') {
// Recommend to add redux-user-timing as a last middleware.
middlewares.push(userTiming);
}
const store = createStore(
rootReducer,
initialState,
applyMiddleware(...middlewares),
);
return store;
};
export default configureStore;
This idea is inspired by clarkbw. and thanks for Carl Vitullo about kind blog explanation.
MIT © Taehwan Noh
FAQs
User Timing middleware for Redux
The npm package redux-user-timing receives a total of 766 weekly downloads. As such, redux-user-timing popularity was classified as not popular.
We found that redux-user-timing demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.