
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@firstfleet/fflogger
Advanced tools
This is a centralized logger that sends logs to papertrail (or any syslog system, you just need to set your host and port) and to the console when process.env.NODE_ENV is not production This logger is hardcoded for udp, if you want to use a more generic syslog, check out @firstfleet/ffsyslog. Its a modified version of winston-syslog. It adds colors and better formatting, breaking apart multiline messages like stack traces for better readability.
This package requires winston and winston-papertrail. In order to send logs to paper trail, you must set define your options in process.env variables
{
PAPERTRAIL_HOST: "host", --no default
PAPERTRAIL_PORT: 8080, --no default
PAPERTRAIL_PROGRAM: "program-name", --defaults to "default"
PAPERTRAIL_HOSTNAME: "host machine", -- defaults to os.hostname()
}
If the papertrail config is not setup the papertrail transport will not be created. At minimum you need a host and port.
If you update the JS Docs you can rebuild the documentation by running
npm run build-docs
To publish to npm
npm loginnpm run sendconst logger = require('./ffLogger');
logger.log('info', 'test info log'); //Log with level info
logger.info('test info log'); //Log with level info
logger.debug('debug level log'); //DEBUG level logs only go to console
logger.error('error message', error); //Should really use ffErrorHandler handleError function but this will work
FAQs
Log to Loggly, and console in dev
The npm package @firstfleet/fflogger receives a total of 0 weekly downloads. As such, @firstfleet/fflogger popularity was classified as not popular.
We found that @firstfleet/fflogger demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.