Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
albuquerque
Advanced tools
A simple, A/B testing framework for Express.js. ABQ is middleware that sits between your users and the Express.js rendering engine and doesn’t require you to change any of your existing code.
ABQ randomly assigns a user to either Set A or Set B and automatically swaps out any view with an available A/B view, falling back to the default view if an A/B view does not exist.
You can use this to test the effectiveness of one view to another.
npm install albuquerque --save
ABQ is Express.js middleware and can be setup really simply.
var abq = require('albuquerque');
app.use(abq());
ABQ overrides the express rendering engine and looks for your A/B views in {view path}/_a/
and {view path}/_b/
. You can override this by passing in your own roots paths.
app.use(abq({ viewRootA: 'test-views/a', viewRootB: 'test-views/b' }));
ABQ randomly assigns a user to either the A or B set and uses session state to store the assignment. Make sure you initialize ABQ after your session provider.
var abq = require('albuquerque');
app.use(session({ secret: 'hiesenberg' }));
app.use(abq());
In your own code, you can always find out what set the user is in.
if(req.session.albuquerque.set === 'A'){
console.log('This user is an A!');
}
FAQs
Simple A/B view testing for Express.js
We found that albuquerque demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.