Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@kofile/log
Advanced tools
Log is a thin wrapper around a logging engine. It supports
At present, these adapters are included by default:
console
You can write your own to support these other logging engines:
Create a log:
const { makeLog } = require('@kofile/log')
const log = makeLog()
By default, your adapter will be console
and the log level will be set to DEBUG
.
See available log levels with
Log.LEVELS //=> ERROR, WARN, INFO, & DEBUG
You can pass in a different level when you instantiate your log:
const log = makeLog({ level: Log.LEVELS.INFO })
If you want to use another adapter, pass it in to the constructor as well:
const { Adapters } = require('@kofile/log')
const log = makeLog({ adapter: new Adapters.Pino() })
NOTE The pino adapter currently doesn't exist. :wink:
If you want access to export the LEVELS
, you can do so:
const { LEVELS } = require('@kofile/log')
LEVELS.DEBUG //=> 'DEBUG'
You can also pass in a meta
object, which will be rendered with every log message as stringified JSON
:
const meta = { foo: 'bar' }
const log = makeLog({ meta })
log.info('test message')
//=> `1984-10-04T06:12:43.453Z [DEBUG] test message -- {"foo":"bar"}`
You can disable coloring by passing in colors: false
:
const log = makeLog({ colors: false })
Meta must be an object.
log.level
Returns the configured log level.
ERROR
will only log messages created with log.error
WARN
will log messages created with log.error
and log.warn
INFO
will log messages created with log.error
, log.warn
, and log.info
DEBUG
will log all messagesUse Log.LEVELS
when specifying levels for log initialization.
log.level = newLevel
Set the given level as the new log level for this instance.
Log level must be one of Log.LEVELS
.
log.adapter
Returns the adapter used by this instance of Log
.
log.defaultTimerCallback = cb
Set the given callback function cb
as the default callback function for timers to execute when they complete.
The callback function will receive (message, [durationSeconds, durationNanoseconds])
.
Example:
const { makeLog } = require('@kofile/log')
const statsd = require('./statsd')
const log = makeLog()
const timerCallback = (message, duration) => {
statsd.timing(message, duration)
}
log.defaultTimerCallback = timerCallback
const timer1 = log.makeTimer('timer-1')
const timer1 = log.makeTimer('timer-2')
const timer1 = log.makeTimer('timer-3')
timer1.start()
timer2.start()
timer3.start()
timer1.end() //=> calls timerCallback with details for timer1
timer2.end() //=> calls timerCallback with details for timer2
timer3.end() //=> calls timerCallback with details for timer3
log.error(message, [...args])
Log an error message. Any additional arguments are passed as-is to the adapter.
log.warn(message, [...args])
log.info(message, [...args])
log.debug(message, [...args])
log.makeTimer(key, [callback])
Returns a preconfigured instance of Timer
.
If the optional callback is provided, when the timer instance ends, the callback will be invoked.
log.spawn([meta])
Returns a new instance of log
with the same initialization parameters as its parent, and merges in meta
if meta
is given.
Please see the Timer documentation.
Many of the aforementioned loggers are good loggers, but in choosing one, we lock ourselves into a given API. This library serves as an abstraction on top of any logging engine to provide a stable, consistent API to develop against.
Node 7+
Run tests with yarn test
FAQs
Node log wrapper
The npm package @kofile/log receives a total of 8 weekly downloads. As such, @kofile/log popularity was classified as not popular.
We found that @kofile/log demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 12 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.