Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@hint/utils-create-server
Advanced tools
@hint/utils-create-server
)Create a server to run tests
This package is installed automatically when using npm create hint
,
no need to do anything from your side.
The test web server can run in a different thread (default) or the same one (when in CI or if indicated by the user ) as the tests. The following is a summary on the benefits of each one:
There main pieces are:
index.ts
: This is what modules consume. Depending on the configuration
or the environment it will use one type of server or another.same-thread-server.ts
: The real web server. It uses express
and listens
to the messages sent by index.ts
. This will also be the class used when
running in CI. If spawn
ed then it will listen for IPC messages for the
configuration.independent-thread-server.ts
: It is a "wrapper" on top of
same-thread-server.ts
. It spawn
s that process and handles the
communication with it asynchronously.When using a different process, each message sent needs a response to confirm
the action has been completed, i.e. if it sends a start
message it should
receive a start
message as well.
In the case of same thread all the methods are async
as well so both servers
implement the same interface and the code does not need to special handle one
or the other.
The following is an example of messages used:
{
"webhint": {
"type": "start"
}
}
Please note that all messages are "scoped" to webhint
to avoid collision
with other possible messages.
IPC serializes the messages to JSON
. Unfortunatelly it does not accept
replacer
/reviver
functions. The server
configuration accepts Buffer
s so in order to send the right data we need
to manually (de)serialize the messages in both ends.
FAQs
hint create server util
The npm package @hint/utils-create-server receives a total of 83 weekly downloads. As such, @hint/utils-create-server popularity was classified as not popular.
We found that @hint/utils-create-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.