
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
when() is a reactive utility function that waits until some
condition becomes true using Vue reactivity system. This package is a port of when-promise from MobX
for Vue.
$ npm install --save vue-when
when(predicate: () => boolean): Promise<void>when() returns a promise that resolves when predicate returns a truthy value.
Predicate is re-evaluated every time when referenced reactive properties change. If the
predicate returns true at the time of when() call, the promise resolves
immediately.
import Vue from 'vue';
import when from 'vue-when';
const data = Vue.observable({
value: 0
});
// will print 1 and 2 with ~5 second interval
async function test() {
console.log(1);
await when(() => data.value === 5);
console.log(2);
}
setInterval(() => data.value++, 1000);
test();
import when from 'vue-when';
// can be useful in case someFn() is called when some action is already running
async function someFn() {
if (someService.listLoading) {
// if action is already running - wait until it finishes
await when(() => !someService.listLoading);
} else {
// otherwise, call the action itself
await someService.loadList();
}
// (do something with list here)
}
import when from 'vue-when';
import store from '@/path/to/store';
const router = new Router(...);
router.beforeEach(async function (to, from, next) {
// we need to init app (load user data) before running access control code
await when(() => store.state.appInitialized);
if (store.getters.isLoggedIn) {
next();
} else {
next({ name: 'login' });
}
});
MIT
FAQs
Wait for condition to become true using Vue reactivity system
The npm package vue-when receives a total of 0 weekly downloads. As such, vue-when popularity was classified as not popular.
We found that vue-when demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.