
Security News
Socket Releases Free Certified Patches for Critical vm2 Sandbox Escape
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.
@openprofiling/trigger-signal
Advanced tools
This trigger is most probably the easier to use because you just need to send a signal to the process (which is generally straightforward even with containers).
This trigger is most probably the easier to use because you just need to send a signal to the process (which is generally straightforward even with containers).
SIGUSR1 and SIGUSR2 signal since they are reserved for user-space behavior.signals on it (see official doc at the end of the previous link)In the following example, when the profile will be done it will be written on disk:
import { ProfilingAgent } from '@openprofiling/nodejs'
import { FileExporter } from '@openprofiling/exporter-file'
import { InspectorCPUProfiler } from '@openprofiling/inspector-cpu-profiler'
import { SignalTrigger } from '@openprofiling/trigger-signal'
const profilingAgent = new ProfilingAgent()
// you just need to precise which signal the trigger need to listen
// little advise: only use SIGUSR1 or SIGUSR2
profilingAgent.register(new SignalTrigger({ signal: 'SIGUSR2' }), new InspectorCPUProfiler())
profilingAgent.start({ exporter: new FileExporter() })
Then to initiate the trigger, just send a signal to the desirated process:
linux/macos:
kill -s USR1 <pid>
You can find the PID via htop, ps aux or just log your process pid with console.log('Process pid is ' + process.pid)` when your application start.
FAQs
This trigger is most probably the easier to use because you just need to send a signal to the process (which is generally straightforward even with containers).
We found that @openprofiling/trigger-signal demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.

Research
Five malicious NuGet packages impersonate Chinese .NET libraries to deploy a stealer targeting browser credentials, crypto wallets, SSH keys, and local files.

Security News
pnpm 11 turns on a 1-day Minimum Release Age and blocks exotic subdeps by default, adding safeguards against fast-moving supply chain attacks.