
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
altamoon-robust-websocket
Advanced tools
robust-websocket is a wrapper around the standard WebSocket class that implements the same interface, but can reconnect when disconnected or the user's computer comes back online.
It is error-code aware and will not reconnect on 1008 (HTTP 400 equivalent) and 1011 (HTTP 500 equivalent) by default. This behavior is fully configurable via the shouldConnect (see Usage).
Use it as you would a normal websocket:
var ws = new RobustWebSocket('ws://echo.websocket.org/')
ws.addEventListener('open', function(event) {
ws.send('Hello!')
})
ws.addEventListener('message', function(event) {
console.log('we got: ' + event.data)
})
But with an optional set of options you can specify as a 3rd parameter
var ws = new RobustWebSocket('ws://echo.websocket.org/', {
// The number of milliseconds to wait before a connection is considered to have timed out. Defaults to 4 seconds.
timeout: 4000,
// A function that given a CloseEvent or an online event (https://developer.mozilla.org/en-US/docs/Online_and_offline_events) and the `RobustWebSocket`,
// will return the number of milliseconds to wait to reconnect, or a non-Number to not reconnect.
// see below for more examples; below is the default functionality.
shouldReconnect: function(event, ws) {
if (event.code === 1008 || event.code === 1011) return
return [0, 3000, 10000][ws.attempts]
},
// A boolean indicating whether or not to open the connection automatically. Defaults to true, matching native [WebSocket] behavior.
// You can open the websocket by calling `open()` when you are ready. You can close and re-open the RobustWebSocket instance as much as you wish.
automaticOpen: true,
// A boolean indicating whether to disable subscribing to the connectivity events provided by the browser.
// By default RobustWebSocket instances use connectivity events to avoid triggering reconnection when the browser is offline. This flag is provided in the unlikely event of cases where this may not be desired.
ignoreConnectivityEvents: false
})
The URL parameter can either be a string, or a function which returns a string. This can be useful if you need the WebSocket to reconnect to a different URL than it connected to initially:
var ws = new RobustWebSocket((ws) => {
return ws.reconnects > 0 ? `ws://echo.websocket.org/?reconnect=${ws.reconnects}` : `ws://echo.websocket.org/`
});
shouldReconnect ExamplesReconnect with an exponetial backoff on all errors
function shouldReconnect(event, ws) {
return Math.pow(1.5, ws.attempts) * 500
}
Reconnect immediately but only 20 times per RobustWebSocket instance
function shouldReconnect(event, ws) {
return ws.reconnects <= 20 && 0
}
Reconnect only on some whitelisted codes, and only 3 attempts, except on online events, then connect immediately
function shouldReconnect(event, ws) {
if (event.type === 'online') return 0
return [1006,1011,1012].indexOf(event.code) && [1000,5000,10000][ws.attempts]
}
See documentation for CloseEvent and online event, the two types of events that shouldReconnect will receive.
Typically, websockets closed with code 1000 indicate that the socket
closed normally. In these cases, robust-websocket won't call
shouldReconnect (and will not attempt to reconnect), unless you set
shouldReconnect.handle1000 to true.
You may need these polyfills to support older browsers
FAQs
A robust reconnecting WebSocket client for the browser
We found that altamoon-robust-websocket demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.