
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
state-machine
Advanced tools
An expressive, feature-rich, event-driven JavaScript finite-state machine

State Machine is a library for managing a finite set of states, and moving between them via actions and transitions.
From its intuitive configuration through its powerful event-based architecture and rich API, State Machine makes it easy to describe and manage interaction with complex state-dependent systems like components, multi-step forms, purchase funnels, visualisations or games.
State Machine has been designed from the outset to feel intuitive and fun to use:
View the live demo at:
To run / tinker with the demo locally, see the Development section.
State Machine can be used directly in the browser, or in a Browserify, Node or ES6 project.
Install via NPM using:
npm install state-machine
Note: If you are expecting the package wheeyls/stateMachine it has now been depreciated.
To continue to use that package in your project, ensure you use the version 0.3.0 in your package.json.
View the documentation at:
Clone the repo using:
git clone https://github.com/davestewart/javascript-state-machine
The following NPM tasks are available, via npm run <task>:
dev - compile and watch the source to state-machine.jsbuild - compile the source to state-machine.min.jsdemo - compile, watch and copy the development build to demo/ and serve demo files at http://localhost:8888test - run all testsTo run a single or set of tests, use the following syntax:
npm run test -- --grep="<filename>"Inspired by @jakesgordon's JavaScript State Machine.
Special thanks to Michael Wheeler (@wheeyls) who very kindly donated the NPM package name state-machine.
FAQs
An expressive, feature-rich, event-driven JavaScript finite-state machine
The npm package state-machine receives a total of 373 weekly downloads. As such, state-machine popularity was classified as not popular.
We found that state-machine demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.