
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
@appjumpstart/mercury-send
Advanced tools
An Express/Connect-compatible middleware for sending HTTP responses
An Express/Connect-compatible middleware for sending HTTP responses
mercury-send
is a super simple middleware that provides (or overrides) a
res.send
function that you can use in other middleware/route handlers. You
can use it with Node's http.Server, Express, or any connect-compatible
framework. To get the most benefit, you'll want to use it in tandem with
mercury-schema which will
provide mercury-send
with a stringify function based on a pre-compiled
response schema.
❯ npm install @appjumpstart/mercury-send --save
const mercurySend = require('@appjumpstart/mercury-send')
// ...
// Use the mercury-send middleware to more easily send responses.
app.use(mercurySend)
// Use res.send in your route-handler to send object that are converted to
// JSON using JSON.stringify or perhaps a stringify function provided by
// mercury-schema.
app.get('/', (req, res) => res.type('json').send({ message: 'Hello!' }))
mercury-send
is completely modeled around some of the features within the
excellent Fastify framework.
FAQs
An Express/Connect-compatible middleware for sending HTTP responses
We found that @appjumpstart/mercury-send demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.