npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

@frozor/lock

v1.2.1

Published

Concurrency control primitives for async JavaScript: Lock, MultiLock, and Semaphore

Readme

@frozor/lock

Concurrency control primitives for async JavaScript/TypeScript: Lock, MultiLock, and Semaphore.

Installation

npm install @frozor/lock

API

Lock

A mutual exclusion lock. Only one acquire call runs at a time; others queue up in FIFO order.

import { Lock } from '@frozor/lock';

const lock = new Lock();

// Only one of these will run at a time
await Promise.all([
    lock.acquire(async () => {
        await writeToFile('hello');
    }),
    lock.acquire(async () => {
        await writeToFile('world');
    }),
]);

// Check how many callers are waiting
console.log(lock.queueLength);

MultiLock<TKey = string>

Manages independent keyed locks. Locks are created on demand and cleaned up after their active work and queue drain, including when work throws. Cleanup is complete when acquire settles; signalling from inside a callback does not by itself mean that the acquisition has finished.

import { MultiLock } from '@frozor/lock';

const locks = new MultiLock<string>();

// These two calls run concurrently (different IDs)
await Promise.all([
    locks.acquire('user-1', () => updateUser('user-1')),
    locks.acquire('user-2', () => updateUser('user-2')),
]);

// These two calls run sequentially (same ID)
await Promise.all([
    locks.acquire('user-1', () => updateUser('user-1')),
    locks.acquire('user-1', () => updateUser('user-1')),
]);

// Number of keys currently active or queued
console.log(locks.size);

Keys use JavaScript Map identity semantics. To use object keys, provide the key type explicitly; the same object reference shares a lock, while a different object is a different key:

const locks = new MultiLock<object>();
const user = {};

await Promise.all([
    locks.acquire(user, () => updateUser()),
    locks.acquire(user, () => updateUser()),
]);

Semaphore

Limits concurrency to a maximum number of simultaneous operations.

import { Semaphore } from '@frozor/lock';

// Allow up to 3 concurrent requests
const semaphore = new Semaphore(3);

const urls = [/* ... */];
await Promise.all(
    urls.map(url =>
        semaphore.acquire(() => fetch(url))
    )
);

Passing undefined (or no argument) disables the concurrency limit — acquire runs work immediately:

const semaphore = new Semaphore(); // no limit
await semaphore.acquire(() => doWork()); // runs immediately

semaphore.queueLength reports callers still waiting for a permit, just like lock.queueLength. Timed-out callers are removed from that queue.

Bounded acquisition

All three primitives accept an optional IAcquireOptions argument:

await lock.acquire(() => updateFile(), { timeoutMs: 5000 });
await locks.acquire('user-1', () => updateUser('user-1'), { timeoutMs: 5000 });
await semaphore.acquire(() => fetch(url), { timeoutMs: 5000 });

timeoutMs limits waiting for a lock or permit, not how long the work can run:

  • Omit it (or pass undefined) for the existing unbounded waiting behavior.
  • Use 0 to acquire immediately if available, or reject without queueing.
  • Other values must be finite, nonnegative numbers; invalid options reject with RangeError before invoking work, even when no concurrency limit is set.
  • Values above 2 ** 31 - 1 milliseconds (about 24.9 days) are capped at that native timer limit. AcquisitionTimeoutError.timeoutMs reports the effective, normalized budget.
  • When waiting expires, the acquisition rejects with AcquisitionTimeoutError and its callback is never invoked. Other live waiters keep their FIFO order.
  • Once a permit is granted, its timeout is cleared. Even if its continuation starts after the deadline, granted work runs and owns the permit until it settles.
import { AcquisitionTimeoutError, Lock } from '@frozor/lock';

const lock = new Lock();
try {
    await lock.acquire(() => updateFile(), { timeoutMs: 5000 });
} catch (error) {
    if (error instanceof AcquisitionTimeoutError) {
        console.log(`Could not acquire within ${error.timeoutMs} ms`);
    } else {
        throw error; // Preserve failures from the work itself.
    }
}

Deadlines use a monotonic clock. Timeout notification depends on event-loop scheduling; granting also checks the deadline so a delayed timer cannot admit expired work. The timeout budget is normalized once when acquire is called, before creating the deadline or scheduling timers.

A waiting timeout cannot interrupt running work or recover a stuck holder. Cancellation of the work itself remains the caller's responsibility. MultiLock keeps an active key while its timed-out waiters are removed, and releases the key after all remaining callers finish.

MaybePromise<T>

Utility type used by all acquire methods. Your work callback can return either T or Promise<T>.

import type { MaybePromise } from '@frozor/lock';

License

MIT