
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
@loopback/health
Advanced tools
This module contains a component to report health status using @cloudnative/health.
npm install --save @loopback/health
The component should be loaded in the constructor of your custom Application class.
Start by importing the component class:
import {HealthComponent} from '@loopback/health';
In the constructor, add the component to your application:
this.component(HealthComponent);
By default, three routes are exposed at:
/health - overall health status/live - liveness status/ready - readiness statusThe paths can be customized via Health configuration as follows:
this.configure(HealthBindings.COMPONENT).to({
healthPath: '/health',
livePath: '/live',
readyPath: '/ready',
});
{% include note.html content="this.configure() must be called before this.component() to take effect. This is a known limitation ." %}
http://localhost:3000/health returns health in JSON format, such as:
{
"status": "UP",
"checks": [
{"name": "readiness", "state": "UP", "data": {"reason": ""}},
{"name": "liveness", "state": "UP", "data": {"reason": ""}}
]
}
It also has to be noted, that by default the OpenAPI spec is disabled and
therefore the endpoints will not be visible in the API explorer. The spec can be
enabled by setting openApiSpec to true.
this.configure(HealthBindings.COMPONENT).to({
openApiSpec: true,
});
live and ready checksThe health component allows extra
live and ready checks
to be added.
Liveness probes are used to know when to restart a container. For example, in case of a deadlock due to a multi-threading defect which might not crash the container but keep the application unresponsive. A custom liveness probe would detect this failure and restart the container.
Readiness probes are used to decide when the container is available for accepting traffic. It is important to note, that readiness probes are periodically checked and not only at startup.
Important: It is recommended to avoid checking dependencies in liveness probes. Liveness probes should be inexpensive and have response times with minimal variance.
import {LiveCheck, ReadyCheck, HealthTags} from '@loopback/health';
const myLiveCheck: LiveCheck = () => {
return Promise.resolve();
};
app.bind('health.MyLiveCheck').to(myLiveCheck).tag(HealthTags.LIVE_CHECK);
// Define a provider to check the health of a datasource
class DBHealthCheckProvider implements Provider<ReadyCheck> {
constructor(@inject('datasources.db') private ds: DataSource) {}
value() {
return () => this.ds.ping();
}
}
app
.bind('health.MyDBCheck')
.toProvider(DBHealthCheckProvider)
.tag(HealthTags.READY_CHECK);
const myReadyCheck: ReadyCheck = () => {
return Promise.resolve();
};
app.bind('health.MyReadyCheck').to(myReadyCheck).tag(HealthTags.READY_CHECK);
Run npm test from the root folder.
See all contributors.
MIT
FAQs
An extension exposes health check related endpoints with LoopBack 4
The npm package @loopback/health receives a total of 4,230 weekly downloads. As such, @loopback/health popularity was classified as popular.
We found that @loopback/health demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.