
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
VERY SMALL (7kb) and fast Node.js module for API development written with ES6 features.
A fast and VERY SMALL Node.js framework for API development using HTTPS written with javascript ES6 features.
npm install 4crud --save
This project uses Mocha-Chai combination in /test folder
npm test
or
node test/server.js
and in other cli type:
curl localhost:3000/getroute1?name=john
curl -X POST -H "Content-Type: application/json" -d '{"name":"john","password":"abc"}' localhost:3000/postroute1
const Server = require('4crud')
const fs = require('fs') //Only for https
const privateKey = fs.readFileSync([PRIVATEKEYPATH], 'utf8') //Only for https
const certificate = fs.readFileSync([CERTIFICATEPATH], 'utf8') //Only for https
const credentials = {
key: privateKey,
cert: certificate,
passphrase: [PASS] //if exists
} //Only for https
const server = new Server()
server
// curl localhost:3000/getroute1?name=john
.get('/route1', (req, res) => {
console.log(`GET on route 1 with name: ${req.search.get('name')}`)
res.statusCode = 200
res.setHeader('Content-Type', 'application/json')
res.end(JSON.stringify(req.url))
})
.get('/route2', (req, res) => {
//console.log('GET on route 2')
res.statusCode = 200
res.setHeader('Content-Type', 'application/json')
res.end('Hello')
})
// curl -X POST -H "Content-Type: application/json" -d '{"name":"john","password":"abc"}' localhost:3000/postroute1
.post('/route1', (req, res) => {
console.log(`POST route 1 with name ${req.body.name}`)
res.statusCode = 200
res.setHeader('Content-Type', 'application/json')
res.end(JSON.stringify(req.body))
})
.post('/route2', (req, res) => {
console.log('POST on route 2')
res.statusCode = 200
res.setHeader('Content-Type', 'application/json')
res.end(JSON.stringify(req.body))
})
.put('/route1', (req, res) => {
console.log('PUT on route 1')
res.statusCode = 200
res.setHeader('Content-Type', 'application/json')
res.end(JSON.stringify(req.body))
})
.delete('/route2', (req, res) => {
console.log(`DELETE on route 1 with name ${req.body.name}`)
res.statusCode = 200
res.setHeader('Content-Type', 'application/json')
res.end(JSON.stringify(req.body))
})
.start(3000, credentials) // start server at port 3000
Bellow the benchmark uses wrk (https://github.com/wg/wrk/wiki/Installing-Wrk-on-Linux)
Run on your preferred CLI on /test folder with server on:
wrk -t8 -c100 -d30s http://localhost:3000/getroute1
| Framework | Requests/second | Size(kB) |
|---|---|---|
| Express | ~05500 | 260 |
| 4crud | ~15100 | 15 |
| Native | ~19000 | - |
npm start
This project is licensed under the MIT License - see the LICENSE file for details
git checkout -b feature/fooBar)git commit -am 'Add some fooBar')git push origin feature/fooBar)FAQs
Fast nodejs module for API development
The npm package 4crud receives a total of 17 weekly downloads. As such, 4crud popularity was classified as not popular.
We found that 4crud demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.