
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@nl-framework/platform
Advanced tools
Unified application factory for nl-framework combining HTTP and GraphQL servers with shared dependency injection context.
Platform adapters and bootstrap utilities that host Nael Framework modules for HTTP, GraphQL, and microservice workloads.
bun add @nl-framework/platform
import { NaelFactory } from '@nl-framework/platform';
import { AppModule } from './app.module';
const application = await NaelFactory.create(AppModule, {
http: {
port: 3000,
},
graphql: {
path: '/api/graphql',
},
});
const { http, graphql } = await application.listen({ http: 3000 });
console.log('HTTP server running on port', http?.port);
console.log('GraphQL mounted at', graphql?.url);
To shut everything down gracefully later on:
await application.close();
NaelFactory.create(Module, options) – boots the dependency graph and returns a NaelApplication facade.NaelApplication.listen(options) – starts HTTP, GraphQL, and federation gateway servers and returns active handles.NaelApplication.getHttpApplication() / getGraphqlApplication() / getGatewayApplication() – access the underlying adapters when you need lower-level control.NaelApplication.get(token) / getConfig() / getLogger() – resolve services from the shared application context.NaelFactoryOptions, NaelListenOptions, and NaelListenResults document the available configuration hooks.| Runtime | Minimum version | Notes |
|---|---|---|
| Bun | 1.1.22 | Primary runtime. CI, CLI scaffolding, and docs target Bun 1.1.22+. |
| Node.js | 20 (experimental) | HTTP adapters run on Node, but Bun remains the recommended build/test environment. |
Apache-2.0
FAQs
Unified application factory for nl-framework combining HTTP and GraphQL servers with shared dependency injection context.
We found that @nl-framework/platform demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.