Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@medley/medley
Advanced tools
Medley is a fast and modern web framework for Node.js. It fully supports both async
/await
and
callbacks and is compatible with Node 6 or greater. It's design incorporates concepts found in
Express, Koa,
hapi, and Fastify.
Most importantly, Medley aims to provide an API that is forward-compatible with future versions
that will take full advantage of Node's HTTP/2
module.
Install:
npm install @medley/medley --save
Create a web server:
const medley = require('@medley/medley')
const app = medley()
app.get('/', (req, res) => {
res.send('Hello World')
})
app.listen(3000)
medley()
functionapp
Objectreq
Objectres
Objectasync
/await
and callbacksHEAD
, OPTIONS
, and 405
responseshttp2
ModuleHTTP/2 is the future of the web. It is faster than HTTP/1.x and comes with new, speed-boosting
features such as server push.
The Node.js http2
module has a very different API from the http
/https
modules, but it also provides a
compatibility API. Medley currently
uses the compatibility API (to support both HTTP/1.x and HTTP/2), but Medley's API is designed such
that when Medley upgrades to the full http2
API, application code built on Medley should not need
to change. Medley's goal is to insulate application code from this transition (as much as possible)
so that code written now that won't require massive rewrites in the future.
@medley/body-parser
- Essential body parsers for Medley.@medley/multipart
- Plugin for parsing multipart/form-data
bodies.@medley/cookie
- Plugin for parsing and setting cookies.@medley/etag
- Plugin for automatic ETag generation & conditional GET responses.@medley/self-request
- Plugin that augments an app to be able to make HTTP requests to itself for testing.@medley/serve-favicon
- Plugin for serving the default favicon.@medley/serve-static
- Plugin for serving static files.ajv-request-validator
- Tool for validating the request
object of popular frameworks with Ajv.This project was forked from Fastify. The initial commit is a clone of fastify/fastify@dab20bd
. All of the credit for that work goes to the Fastify team.
FAQs
Fast and modern web framework for Node.js
The npm package @medley/medley receives a total of 1 weekly downloads. As such, @medley/medley popularity was classified as not popular.
We found that @medley/medley demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.