
Security News
Node.js Homepage Adds Paid Support Link, Prompting Contributor Pushback
A new Node.js homepage button linking to paid support for EOL versions has sparked a heated discussion among contributors and the wider community.
github.com/rickb777/servefiles/v3
Serve static files from a Go http server, including performance-enhancing features.
Please see the GoDoc for more.
go get -u github.com/rickb777/servefiles/v3
User agents can cache responses. This http server enables easy support for two such mechanisms:
etags
) allow the response to be sent only when it has changedmax-age
response headers allow the user agent to cache entities until some expiry time.Note that conditional requests RFC9110 and max-age
caching (RFC9111) can work together as required. Conditional
requests still require network round trips, whereas caching removes all network round-trips until the entities reach
their expiry time.
Sub-package echo_adapter provides integration hooks into the Echo web framework. This makes it easy for Echo code to use this asset handler also: see the example in the sub-package for more info.
Sub-package gin_adapter provides integration hooks into the Gin web framework. This makes it easy for Gin code to use this asset handler also: see the example in the sub-package for more info.
Version 3 brings Go module support. Also, brotli
encoding is supported alongside gzip
encoding. Brotli now has
widespread implementation in most browsers. You can compress your textual assets (including Javascript, CSS, HTML, SVG
etc) using Brotli and/or Gzip as part of your build pipeline, uploading both the original and compressed files to your
production server's asset directories. Brotli compression takes longer than Gzip but produces more compact files.
Compression is, of course, optional.
Earlier versions do not support Go modules, nor brotli
encoding, although gzip
encoding is supported.
This library has been in reliable production use for some time. Versioning follows the well-known semantic version pattern.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A new Node.js homepage button linking to paid support for EOL versions has sparked a heated discussion among contributors and the wider community.
Research
North Korean threat actors linked to the Contagious Interview campaign return with 35 new malicious npm packages using a stealthy multi-stage malware loader.
Research
Security News
The Socket Research Team investigates a malicious Python typosquat of a popular password library that forces Windows shutdowns when input is incorrect.