
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@appsignal/plugin-breadcrumbs-network
Advanced tools
- [AppSignal.com website][appsignal] - [Documentation][docs] - [Support][contact]
@appsignal/plugin-breadcrumbs-network
The @appsignal/javascript
plugin for automatically adding a breadcrumb on every network request. Works with both XMLHttpRequest
and fetch
.
Add the @appsignal/plugin-breadcrumbs-network
and @appsignal/javascript
packages to your package.json
. Then, run yarn install
/npm install
.
You can also add these packages to your package.json
on the command line:
yarn add @appsignal/javascript @appsignal/plugin-breadcrumbs-network
npm install --save @appsignal/javascript @appsignal/plugin-breadcrumbs-network
import Appsignal from "@appsignal/javascript"
import { plugin } from "@appsignal/plugin-breadcrumbs-network"
const appsignal = new Appsignal({
key: "YOUR FRONTEND API KEY"
})
appsignal.use(plugin(options))
plugin
optionsThe plugin
can be initialized with the following options:
Param | Type | Description |
---|---|---|
xhrEnabled | Boolean | (optional) A boolean value representing whether the plugin should bind to XMLHttpRequest . Defaults to true . |
fetchEnabled | Boolean | (optional) A boolean value representing whether the plugin should bind to fetch . Defaults to true . |
This repository is a Lerna-managed monorepo, containing packages (located in the /packages
directory) that map to separate npm
modules.
To install the dependencies:
yarn install
lerna bootstrap
You can then run the following to start the compiler in watch mode. This automatically compiles both the ES Module and CommonJS variants:
yarn build:watch
You can also build the library without watching the directory:
yarn build # build both CJS and ESM
yarn build:cjs # just CJS
yarn build:esm # just ESM
The tests for this library use Jest as the test runner. Once you've installed the dependencies, you can run the following command in the root of this repository to run the tests for all packages, or in the directory of a package to run only the tests pertaining to that package:
yarn test
This repo uses Semantic Versioning (often referred to as semver). Each package in the repository is versioned independently from one another.
@TODO: define how this works once we know more about releasing
Thinking of contributing to this repo? Awesome! 🚀
Please follow our Contributing guide in our documentation and follow our Code of Conduct.
Also, we would be very happy to send you Stroopwafles. Have look at everyone we send a package to so far on our Stroopwafles page.
Contact us and speak directly with the engineers working on AppSignal. They will help you get set up, tweak your code and make sure you get the most out of using AppSignal.
FAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.