
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
appinsights-logger
Advanced tools
wrapper for AI setup, compatible with Azure Functions
npm i appinsights-logger --save
Just set ENV variable APPINSIGHTS_INSTRUMENTATIONKEY
Set the AI_MESSAGE_NAMESPACE ENV variable to identify message source. Format is [myCompany].[AgileTeam].[Repo] (foocompany.Architecture.Appinsights)
const { trackEvent, trackException } = require('appinsights-logger')
trackEvent({ name: 'TEST', properties: { myProp: 'my value' } })
const ex = new Error('some error')
trackException({ exception: ex, properties: { myProp: 'my value' } })
import { markDependency, measureDependency } from 'appinsights-logger'
const marker = markDependency('HTTP', 'GET /products')
try {
const url = 'https://domain.com/api/products'
const locations = await requestPromise(url)
measureDependency(marker, url)
} catch(ex) {
measureDependency(marker, url, false)
// could also trackException(ex) here
}
dependency tracking is useful for measuring latency of remote calls (SQL, HTTP) and also failures
import { markDependency, measureDependency } from 'appinsights-logger'
const marker = markDependency('cosmos', 'query collection')
try {
const sql = 'select top 100 from c'
const locations = await cosmosDb.items.query(sql) // pseudo-code cosmos query
measureDependency(marker, sql)
} catch(ex) {
measureDependency(marker, sql, false)
// could also trackException(ex) here
}
customEvents are powerful because you can query the logs by the
customDimensions
object
import { trackDebugEvent } from from 'appinsights-logger'
// This 'debug' event will only log if the DEBUG_INSIGHTS="true" env var is set
trackDebugEvent({ name: 'new order', properties: { order }, measurements: { productCount: order.products.length } })
cp .env.example .env
fill in
.env
with App Insight key
npm run build
npm test
FAQs
thin, yet opinionated wrapper for applcation insights
We found that appinsights-logger demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.