
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Basic framework app object for dependency injection, event propagation, and error handling.
Basic Nodejs micro-framework app object for dependency injection, error codes, signal handling, and a few other neat things.
npm install appframe --save
This module is intended to improve application design by providing a framework to mount your application into a single object. This object, typically named app
is injected into load file you manually require or autoload (using the framework).
This modulue is intended to bootstrap an application with an object variable, which is injected into each autoloaded file for better application design.
In this example, you'll see the most basic setup for this micro-framework where we provide a basic starting point for the injected variable. We load express and setup our controllers in another file.
In this example, you'll see the typcial use case for using this framework. We autoload express and prevent the application from being online AND create a stateful system for gracefully shutting down the server. Our configuration defines autoloading and other systems. Notice how the controller file for the express route did not change, but was just automatically loaded.
Coming Soon
FAQs
Basic framework app object for dependency injection, event propagation, and error handling.
The npm package appframe receives a total of 14 weekly downloads. As such, appframe popularity was classified as not popular.
We found that appframe demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.