Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Zukeeper is a set of devtools for Zustand, in Zustand. v1.0.0 features action and state logging, diffing, state hierarchy visualization, and time travel debugging. It's meant for the Zustand community, so it's fully open source and in active development (flag issues, send us PRs!)
Zukeeper was designed with simplicity in mind, and the setup reflects that. Here's how you can start:
npm install zukeeper
npm i zukeeper
Import zukeeper into your store creation file Pass zukeeper as middleware to create( ) Assign your store, as you named it, to window.store
Zukeeper's publication on the Chrome Web Store is awaiting Google's approval, but in the meantime you can clone this github repo or click here to download the zipped file and load the extension into Chrome in developer mode. For further guidance on that process, click here.
That's it! Once your extension is installed and your store is ready, you're good to go. Zukeeper lives in the Chrome devtool panel, just as you'd expect. Open them up, and begin using the tools! We look forward to expanding to additional browsers in upcoming releases.
Zukeeper's primary features are:
Action and state tracking:
Diffing:
State hierarchy visualization:
Time travel debugging:
and of course… Dark mode:
Use Zukeeper! Hunt bugs, flag issues, and send us PRs! We're excited to bring Zukeeper to the community, and we hope the community will be excited to improve. Here is the repo - we look forward to your contributions!
FAQs
Dev Tools for Zustand, in Zustand
The npm package zukeeper receives a total of 4,188 weekly downloads. As such, zukeeper popularity was classified as popular.
We found that zukeeper demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.