
Security News
PodRocket Podcast: Inside the Recent npm Supply Chain Attacks
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
@slimio/core
Advanced tools
The Core was created to load and manage SlimIO addons, it will create/handle communication between each addons.
Each addon are isolated from each others (designed like container above).
This package is available in the Node Package Repository and can be easily installed with npm or yarn.
$ npm i @slimio/core
# or
$ yarn add @slimio/core
A script that demonstrate how to load a default core (Configuration will be created dynamically).
const Core = require("@slimio/core");
async function main() {
console.time("start_core");
const core = await (new Core(__dirname)).initialize();
console.timeEnd("start_core");
// Handle exit signal!
process.on("SIGINT", () => {
console.error("Exiting SlimIO Agent (please wait)");
core.exit().then(() => {
setImmediate(process.exit);
}).catch(function mainErrorHandler(error) {
console.error(error);
process.exit(1);
});
});
}
main().catch(console.error);
Create a new instance of Core Object. The argument dirname
is the root directory where the core have to load his configuration and all addons.
The constructor take an optional options object which contain all options to configure the core Agent.
interface ConstructorOptions {
silent?: boolean;
autoReload?: number;
}
Initialize the Core (it will load configuration and addons). The loading of addons is lazy, so the response will be returned before the addons have had time to fully load.
Stop the core and all affiliated ressources (addons, config etc..).
Note: Think to exit the process with an iteration + 1 (with setImmediate).
Name | Refactoring | Security Risk | Usage |
---|---|---|---|
@slimio/addon | ⚠️Major | High | Addon default class |
@slimio/config | Minor | High | Configuration interaction |
@slimio/ipc | ⚠️Major | High | Inter-process communication |
@slimio/is | Minor | Low | Type checker |
@slimio/safe-emitter | Minor | High | Safe emittter |
@slimio/scheduler | Minor | Low | Scheduler |
@slimio/utils | Minor | High | Bunch of useful functions |
make-promises-safe | ⚠️Major | High | Promise not exit process when fail |
MIT
FAQs
Slim.IO Core
We found that @slimio/core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.