
Security News
White House Authorizes Private Companies to Conduct Offensive Cyber Operations
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.
Server-side tracking SDK for Lodd. Built for API, MCP, agent, and CLI products — the headless stuff nothing else tracks well.
npm install @lodd/node
import { Lodd } from "@lodd/node";
const ca = new Lodd({
apiKey: process.env.LODD_API_KEY!, // ca_... from your Lodd dashboard
siteId: process.env.CA_SITE_ID!, // UUID of the site to report to
});
ca.track("api_call", { endpoint: "/v1/search", duration_ms: 42 });
// On graceful shutdown
await ca.close();
import express from "express";
import { Lodd } from "@lodd/node";
import { caExpress } from "@lodd/node/express";
const app = express();
const ca = new Lodd({ apiKey, siteId });
app.use(caExpress(ca, {
ignore: (req) => req.path === "/health",
}));
The middleware captures path, method, status, and duration_ms. It never captures query strings, request bodies, or headers.
| Option | Default | Notes |
|---|---|---|
apiKey | — | Required. |
siteId | — | Required. Overridable per track() call. |
baseUrl | https://api.lodd.dev | Production proxy. Override to point at a local Supabase stack (e.g. http://127.0.0.1:54321) or an alternate deploy. |
maxBatchSize | 50 | Events queued before forced flush. |
flushIntervalMs | 5000 | Timer-based flush cadence. |
onError | console.warn | Called for dropped events or failed batches. |
track() never throws.onError).close() flushes any queued events.Server-side events don't have natural session boundaries, so the SDK synthesises a session_id deterministically from user_id + site_id + UTC date. This makes Daily Active Users correct out of the box, but a single user active across multiple UTC days will count as multiple unique_visitors in weekly/monthly range aggregations. Supply your own session_id in a future ca.track() overload if you need different granularity.
FAQs
Server-side tracking SDK for Lodd — API, agent, MCP, and CLI events
The npm package @lodd/node receives a total of 5 weekly downloads. As such, @lodd/node popularity was classified as not popular.
We found that @lodd/node demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.