Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools oft miss.
better-node-inspect
Advanced tools
A modern node inspector optimized for command line usage (like ipython, pry, iex, etc.)
Let's make node inspect
better on the command line! I'm used to amazing CLI debugging tools like ipython, iex, and pry. I want to bring some of that magic to node.
This isn't going to all be possible, but here's my wishlist:
...
await
in a debugger session (SyntaxError: await can not be used when evaluating code while paused in the debugger
)function name() {}
>
in debug modelog
into loglevel_1
file:line:column
c
vs cont
)_
does not work in a debugger repl, I want to get the last result using that shortcutdebug>
session, or execute certain types of code within the inner repl automatically._ex_
exception reference when an exception is raisedup
and down
stacktrace navigationnext
, up
, etc. By default, this does not seem to happen.tsx
, or any other transpilation tool, the source and line + column numbers are based on the transpiled code, not the original source.process.stdout
breaking when certain content is passed to it. When the debugger is active, the event loop is paused, and the drain
event is not processed causing process.stdout.write
to stop working entirely.up
and down
stacktrace navigationframe(n)
to jump to a specific stack framepp
locals
ls
location
--pause-on-exception-state
--inspect-resume-on-start
node inspect
specific CLI arguments using NODE_INSPECT_OPTIONS
env var (export NODE_INSPECT_OPTIONS="--inspect-resume-on-start true --pause-on-exception-state uncaught"
)One of my biggest gripes with the nodejs ecosystem is how fragmented it is. My goal is to get all of the changes here upstreamed:
In order to use the improved inspector:
better-node-repl the-file.js
To use the repl utilities make sure you import the module:
import "better-node-inspect"
node inspect
It's always helpful to understand how things are wired together when you are hacking:
node inspect
entrypointnode:
require paths are processednode inspect
is run fromThere's been a lot of attempts to improve the node REPL over the years:
FAQs
A modern node inspector optimized for command line usage (like ipython, pry, iex, etc.)
The npm package better-node-inspect receives a total of 8 weekly downloads. As such, better-node-inspect popularity was classified as not popular.
We found that better-node-inspect demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools oft miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.