
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
threadbridge
Advanced tools
Utility TypeScript library that simplifies bi-directional communication between the main thread and web workers with full type safety. Use the same codebase to facilitate seamless and strongly-typed data exchange in both directions.
A utility TypeScript library that simplifies bi-directional communication between the main thread and web workers with full type safety. This lightweight implementation extends the default API and requires no additional libraries. Use the same codebase to facilitate seamless and strongly-typed data exchange in both directions. Of course, it can be used in one direction if, for some reason, you do not want to use it for bi-directional communication
Install the library using npm:
npm install threadbridge
This API was designed to be used in both the MainThread and WebWorker simultaneously. First, commands and messages are defined, followed by the data associated with them.
// Types.ts
export enum SenderCommands {
Ping,
}
export interface SenderCommandsData {
[SenderCommands.Ping]: { value: number };
}
export enum ReceiverMessages {
Pong,
}
export interface ReceiverMessagesData {
[ReceiverMessages.Pong]: { value: number };
}
Initialize WebWorker and pass it to bridge with types.
// MainThread.ts
import { ThreadBridge } from "threadbridge";
import { SenderCommands, SenderCommandsData, ReceiverMessages, ReceiverMessagesData } from "./Types";
const worker = new Worker("./Worker.ts");
const bridge = new ThreadBridge<SenderCommands, SenderCommandsData, ReceiverMessages, ReceiverMessagesData>(worker);
bridge.postMessage(SenderCommands.Ping, { value: 1 });
bridge.onMessage(ReceiverMessages.Pong, ({ value }) => {
console.log(value);
});
Then use ThreadBridge in WebWorker to communication with MainThread.
// Worker.ts
import { ThreadBridge } from "threadbridge";
import { SenderCommands, SenderCommandsData, ReceiverMessages, ReceiverMessagesData } from "./Types";
const bridge = new ThreadBridge<ReceiverMessages, ReceiverMessagesData, SenderCommands, SenderCommandsData>(self);
bridge.postMessage(ReceiverMessages.Pong, { value: 2 });
bridge.onMessage(SenderCommands.Ping, ({ value }) => {
console.log(value);
});
If u prefer to use named arrow functions you can do it this way:
const callback: ThreadBridge.ReceiverHandler<ReceiverMessages.Pong, ReceiverMessagesData> = ({ value }) => {
console.log(value);
};
bridge.onMessage(ReceiverMessages.Pong, callback);
ThreadBridge<SenderCommands, SenderCommandsData, ReceiverMessages, ReceiverMessagesData>
constructor(worker: Worker | DedicatedWorkerGlobalScope)
postMessage(command: SenderCommands, data: SenderCommandsData[SenderCommands]): void
onMessage(message: ReceiverMessages, handler: (data: ReceiverMessagesData[ReceiverMessages]) => void): void
clearHandler(message: ReceiverMessages): void
clearAllHandlers(): void
Distributed under the MIT License
FAQs
Utility TypeScript library that simplifies bi-directional communication between the main thread and web workers with full type safety. Use the same codebase to facilitate seamless and strongly-typed data exchange in both directions.
We found that threadbridge demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.