Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
The thenify npm package is designed to convert Node.js callback-style functions to functions that return a promise. This is particularly useful when working with older Node.js APIs or third-party libraries that do not natively support promises, allowing developers to write cleaner, more modern asynchronous code using async/await or .then() syntax.
Converting a callback-style function to a promise-returning function
This feature allows you to wrap a traditional Node.js callback-style function, such as `fs.readFile`, in a way that it returns a promise. This enables the use of `.then()` and `.catch()` for cleaner asynchronous control flow.
const thenify = require('thenify');
const fs = require('fs');
const readFile = thenify(fs.readFile);
readFile('example.txt', 'utf8').then(contents => {
console.log(contents);
}).catch(err => {
console.error(err);
});
Introduced in Node.js 8, `util.promisify` is a built-in function that converts a callback-based function into a promise-based one. It serves a similar purpose to thenify but is built into the Node.js runtime. Unlike thenify, it does not need to be installed as an external package, offering a more integrated solution for modern Node.js versions.
Bluebird is a comprehensive promise library that offers a wide range of features for working with promises, including but not limited to converting callback-style functions into promises. It provides a method called `.promisify()` which is similar to thenify's functionality. Bluebird promises are known for their performance and additional utility methods not found in native promises, making it a more feature-rich, albeit heavier, alternative.
Pify is another npm package that converts callback-based functions into promises. It offers a simple and lightweight approach similar to thenify but with additional options for customizing the behavior of the promisified function, such as the ability to handle multiple callback arguments or to exclude certain functions from promisification. Pify provides a balance between simplicity and configurability.
Promisify a callback-based function using any-promise
.
bluebird
Array
, also support change the behavior by options.multiArgs
An added benefit is that throw
n errors in that async function will be caught by the promise!
Promisifies a function.
options
are optional.
options.withCallback
- support both callback and promise style, default to false
.
options.multiArgs
- change the behavior when callback have multiple arguments. default to true
.
true
- converts multiple arguments to an arrayfalse
- always use the first argumentArray
- converts multiple arguments to an object with keys provided in options.multiArgs
Turn async functions into promises
var thenify = require('thenify');
var somethingAsync = thenify(function somethingAsync(a, b, c, callback) {
callback(null, a, b, c);
});
var thenify = require('thenify');
var somethingAsync = thenify(function somethingAsync(a, b, c, callback) {
callback(null, a, b, c);
}, { withCallback: true });
// somethingAsync(a, b, c).then(onFulfilled).catch(onRejected);
// somethingAsync(a, b, c, function () {});
or use thenify.withCallback()
var thenify = require('thenify').withCallback;
var somethingAsync = thenify(function somethingAsync(a, b, c, callback) {
callback(null, a, b, c);
});
// somethingAsync(a, b, c).then(onFulfilled).catch(onRejected);
// somethingAsync(a, b, c, function () {});
var thenify = require('thenify');
var promise = thenify(function (callback) {
callback(null, 1, 2, 3);
}, { multiArgs: false });
// promise().then(function onFulfilled(value) {
// assert.equal(value, 1);
// });
var thenify = require('thenify');
var promise = thenify(function (callback) {
callback(null, 1, 2, 3);
}, { multiArgs: [ 'one', 'tow', 'three' ] });
// promise().then(function onFulfilled(value) {
// assert.deepEqual(value, {
// one: 1,
// tow: 2,
// three: 3
// });
// });
FAQs
Promisify a callback-based function
The npm package thenify receives a total of 13,410,514 weekly downloads. As such, thenify popularity was classified as popular.
We found that thenify demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.