
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
Syringe is a small utility you can use to inject dependencies into functions.
Syringe works by parsing the function signature to look for variable names.
The module then takes one or more parameters, a function to inject and any number of objects where the keys may match the named parameters required by the injected function.
In this example myFunc expects two parameters, arg1 and arg2. The Syringe function receives other parameters, but myFunc will only have access to the ones it asked for.
var inject = require('syringe');
var myFunc = function(arg1, arg2) {
//...
}
var injected = inject(myFunc, {
arg1: 'Foo',
arg2: 'Bar',
arg3: 'Ponies',
arg4: {
pie: 'apple'
}
});
Bug fixes and new features are of course very welcome! To get started developing install Grunt and run the test suite with npm test.
Please accompany any Pull Requests with the relevant test cases and make sure everything else still passes :).
Shout out to @inf0rmer and @agravem.
FAQs
Simple dependency injection for functions
We found that syringe-js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.