
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
alchemist-middleware
Advanced tools
Procuring static files since 1802.
Note: This project is in early development, and versioning is a little different. Read this for more details.
So there are already a number of pieces of middleware intended for serving static files. The difference with alchemist is that this one is intended only for serving static files. The main difference is that when a file is not found, it throws an error rather than just passing the request on. This is because when you are serving a static site, a 404 is not recoverable, other than by an error page.
This module is a light wrapper over send, that has static-style error handling.
npm install alchemist-middleware
Alchemist's API was designed to be quite straightforward to use. Here's a quick example:
var http = require('http'),
connect = require('connect'),
alchemist = require('alchemist-middleware');
var app = connect().use(alchemist('public'));
http.createServer(app).listen(1111);
There are a few options you can use to configure alchemist's behavior. An example is shown below with all the options filled out as their default values:
alchemist('public', {
etag: true, // toggle etag generation
hidden: false, // toggle serving of hidden/dotfiles
index: 'index.html', // directory index filename, string or false
maxage: 0 // max age in ms for http cacheing
});
FAQs
Procuring static files since 1802
We found that alchemist-middleware demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.