
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
substate-connect
Advanced tools
Higher Order Functions to use substate with React (soon Preact and Inferno)
import {connect} from 'substate-connect';
import substateInstance from './mystate.js';
/**
MyComponent
*/
export default connect(substateinstance, {
prop1: 'path.to.prop',
prop2: 'name',
prop3: 'location'
})(MyComponent);
### wrapping App in store instance
// App.js
import { Provide } from 'substate-connect';
import substateIntsance from './mystate.js';
/*
function App....
*/
const WiredApp = Provide(substateInstance, ["STATE_UPDATED"], onMount)(App);
export default WiredApp;
Similar to react-redux connect method.
You pass in a reference to the substate instance, so we can wire up the props, and you pass in an object mapping the prop names for the component (the keys), to the prop values you want (the path -- as a string -- to the chunk of state you need). Then it returns a function which needs your component as an argument.
The Provide HOC needs the substate instance as a first argument. The second argument is an array of substate $types you want the App to setState too. It's recommended to at least have "STATE_UPDATED" passed in the array.
onMount is a function that will fire when the Provide higher order component mounts.
The signature:
onMount(store, triggers)
So you have access to the store and triggers passed in. Note: this is bound to the HOC.
Now it's all wired up.
Mapping props allows your component to have its own prop structure and not care what the global state structure is like. This allows for component reusability.
Pass those in as you normally would. They will be alongside the props from the connect method. This way you can pass functions into the component during normal composition.
FAQs
Easily wire up substate with popular front-end libraries
We found that substate-connect demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.