
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@mediocre/bloodhound
Advanced tools
Bloodhound is a Node.js package that allows you to retrieve tracking data from shipping carriers (Amazon, DHL, FedEx, UPS, USPS) in a common format.
Bloodhound is a Node.js package that allows you to retrieve tracking data from shipping carriers (Amazon, DHL, FedEx, UPS, USPS) in a common format.
This module was inspired by the excellent shipit
module. We built Bloodhound to provide better support for parsing of timestamps (read more below).
Common format
Bloodhound interfaces with several carrier APIs and returns results in a single, unified format. Each carrier activity/movement/scan is represented as an event with a description, geographic location (city/state), and timestamp.
Timestamps
When it comes to timestamps there are two types of carrier APIs: those that include a UTC offset which can be easily parsed as proper dates, and those that provide timestamp strings that need to be interepreted based on the local timezone of the geographic location for the event.
When Bloodhound encounters a timestamp without a UTC offset if looks up the timezone by geocoding the event's geographic location. The returned results contain proper dates in the correct timezone.
Geocode results are cached in-memory locally. Geocode results can optionally be cached remotely in Redis.
Carrier Guessing
Bloodhound can guess the carrier given a tracking number explicity through the bloodhound.guessCarrier(trackingNumber)
method. Bloodhound will also try to guess the carrier when tracking a package without specifying a carrier when using the bloodhound.track(trackingNumber)
method.
Shipped/Delivered Dates
Bloodhound also examines each of the activity/movement/scan events for "shipped" and "delievered" event types (beyond simple electronic events like "shipping label created" or "manifest file sent"). When a matching event type is encountered Bloodhound returns a shippedAt
and deliveredAt
date.
Estimated Delivery Dates
Bloodhound provides estimated delivery date information when available from carriers. This feature returns a date range with the earliest and latest expected delivery times, giving you a reliable delivery window for packages.
This feature is supported across all major carriers (Amazon, DHL, FedEx, UPS, and USPS) when the carrier provides this information. For carriers that only provide a single delivery date estimate, both earliest
and latest
will contain the same value.
Note that estimated delivery dates are dynamic and may change as packages move through the delivery network. Carriers update these estimates based on real-time shipping conditions, weather, and routing changes. It's recommended to track packages periodically to get the most current delivery estimates.
const Bloodhound = require('@mediocre/bloodhound');
const bloodhound = new Bloodhound({
usps: {
userId: 'USPS_USER_ID'
}
});
bloodhound.track('tracking number', { carrier: 'USPS' }, function(err, data) {
console.log(data);
});
Creates a new Bloodhound client. Each carrier requires a different combination of credentials (API keys, account numbers, passwords, user IDs, etc).
By default, when Bloodhound encounters a timestamp without a UTC offset it will geocode using OpenStreetMap (which does not require an API key). You can optionally use a different geocoder. You can also optionally cache geocode results in Redis.
const Bloodhound = require('@mediocre/bloodhound');
const bloodhound = new Bloodhound({
dhl: {
apiKey: 'DHL API key from https://developer.dhl.com'
},
fedEx: {
api_key: 'abcdefghijklmnopqrstuvwxyz',
secret_key: 'abcdefghijklmnopqrstuvwxyz'
},
geocoder: {
apiKey: 'GOOGLE_API_KEY',
language: 'en',
provider: 'google',
region: '.us'
},
pettyCache: {
host: '127.0.0.1',
options: {
auth_pass: 'secret'
},
port: 6379
},
ups: {
client_id: 'YOUR_UPS_CLIENT_ID',
client_secret: 'YOUR_UPS_CLIENT_SECRET'
},
usps: {
userId: 'USPS_USER_ID'
}
});
bloodhound.track('tracking number', 'FedEx', function(err, data) {
console.log(data);
});
amazon
The Amazon Shipping carrier does not require any configuration. It works with Amazon Shipping tracking numbers (TBA/TBM/TBC format).
dhl
The DHL API requires an API key: https://developer.dhl.com.
geocoder*
By default Bloodhound uses the OpenStreetMap geocode provider. You can optionally specify geocoder options which are passed to the node-geocode module.
pettyCache
By default Bloodhound caches geocode results in-memory locally. You can optionally enable caching of geocoder results to a remote Redis server. These options are passed to the petty-cache module.
ups
The UPS API requires OAuth 2.0 credentials (client_id and client_secret). You can obtain these credentials from the UPS Developer Portal: https://developer.ups.com/
usps
The USPS API simply requires a user ID: https://www.usps.com/business/web-tools-apis/track-and-confirm-api.htm
Guesses the carrier of the specified tracking number.
const carrier = bloodhound.guessCarrier('tracking number');
console.log(carrier);
Retrieves tracking data for the specified tracking number.
bloodhound.track('tracking number', { carrier: 'USPS' }, function(err, data) {
console.log(data);
});
Data
{
"deliveredAt": "2019-06-30T18:03:00.000Z",
"estimatedDeliveryDate": {
"earliest": "2019-06-28T13:00:00.000Z",
"latest": "2019-06-30T21:00:00.000Z"
},
"events": [
{
"address": {
"city": "CARROLLTON",
"state": "TX",
"zip": "75010"
},
"date": "2019-06-30T18:03:00.000Z",
"description": "Delivered, Front Door/Porch"
},
{
"address": {
"city": "CARROLLTON",
"state": "TX",
"zip": "75010"
},
"date": "2019-05-13T17:32:00.000Z",
"description": "Sorting Complete"
}
],
"shippedAt": "2019-05-13T17:32:00.000Z"
}
[2.3.0] - 2025-09-11
accessKey
, username
, password
to client_id
, client_secret
FAQs
Bloodhound is a Node.js package that allows you to retrieve tracking data from shipping carriers (Amazon, DHL, FedEx, UPS, USPS) in a common format.
The npm package @mediocre/bloodhound receives a total of 122 weekly downloads. As such, @mediocre/bloodhound popularity was classified as not popular.
We found that @mediocre/bloodhound demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.