
Security News
Open Source Maintainers Feeling the Weight of the EU’s Cyber Resilience Act
The EU Cyber Resilience Act is prompting compliance requests that open source maintainers may not be obligated or equipped to handle.
sendscript
Advanced tools
Write JS code that you can run on servers, browsers or other clients.
SendScript leaves it up to you to choose HTTP, web-sockets or any other method of communication between servers and clients that best fits your needs.
For this example we'll use socket.io.
npm install --no-save socket.io socket.io-client
We use the
--no-save
option because it's only for demonstration purposes.
We write a simple module.
// ./example/math.mjs
export const add = (a, b) => a + b
export const square = a => a * a
Here a socket.io server that runs SendScript programs.
// ./example/server.socket.io.mjs
import { Server } from 'socket.io'
import Parse from '../parse.mjs'
import * as math from './math.mjs'
const parse = Parse(math)
const server = new Server()
const port = process.env.PORT || 3000
server.on('connection', (socket) => {
socket.on('message', async (program, callback) => {
try {
const result = parse(program)
callback(null, result) // Pass null as the first argument to indicate success
} catch (error) {
callback(error) // Pass the error to the callback
}
})
})
server.listen(port)
process.title = 'sendscript'
Now for a client that sends a program to the server.
// ./example/client.socket.io.mjs
import socketClient from 'socket.io-client'
import stringify from '../stringify.mjs'
import module from '../module.mjs'
import * as math from './math.mjs'
import assert from 'node:assert'
const port = process.env.PORT || 3000
const client = socketClient(`http://localhost:${port}`)
const send = program => {
return new Promise((resolve, reject) => {
client.emit('message', stringify(program), (error, result) => {
error
? reject(error)
: resolve(result)
})
})
}
const { add, square } = module(math)
// The program to be sent over the wire
const program = square(add(1, add(add(2, 3), 4)))
const result = await send(program)
console.log('Result: ', result)
assert.equal(result, 100)
process.exit(0)
Now we run this server and a client script.
set -e
# Run the server
node ./example/server.socket.io.mjs&
# Run the client example
node ./example/client.socket.io.mjs
pkill sendscript
Result: 100
There is a good use-case to write a module in TypeScript.
# Create pretty docs for your module.
npx typedoc my-module.ts
Now we can use the my-module.ts
file for the client API.
import type * as MyModule from './my-module'
import sendScriptApi from 'sendscript/api.mjs'
export default sendScriptApi([
fnOne,
fnTwo,
], /* perform websocket request */) as typeof MyModule
[!NOTE] Although type coercion on the client side can improve the development experience, it does not represent the actual type. Values are subject to serialization and deserialization.
Tests with 100% code coverage.
npm t -- -R silent
npm t -- report text-summary
> sendscript@1.0.0 test
> tap -R silent
> sendscript@1.0.0 test
> tap report text-summary
=============================== Coverage summary ===============================
Statements : 100% ( 239/239 )
Branches : 100% ( 71/71 )
Functions : 100% ( 18/18 )
Lines : 100% ( 239/239 )
================================================================================
Standard because no config.
npx standard
The changelog is generated using the useful auto-changelog project.
npx auto-changelog -p
Check if packages are up to date on release.
npm outdated && echo 'No outdated packages found'
No outdated packages found
See the LICENSE.txt file for details.
FAQs
Blur the line between server and client code.
The npm package sendscript receives a total of 9 weekly downloads. As such, sendscript popularity was classified as not popular.
We found that sendscript demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The EU Cyber Resilience Act is prompting compliance requests that open source maintainers may not be obligated or equipped to handle.
Security News
Crates.io adds Trusted Publishing support, enabling secure GitHub Actions-based crate releases without long-lived API tokens.
Research
/Security News
Undocumented protestware found in 28 npm packages disrupts UI for Russian-language users visiting Russian and Belarusian domains.