
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
bpmn-engine
Advanced tools
BPMN 2.0 execution engine. Open source javascript workflow engine.
See bpmn-elements for supported elements. The engine only support elements and attributes included in the BPMN 2.0 scheme, but can be extended to understand other schemas and elements.
The aim is to, at least, have BPMN 2.0 core support.
This package is shipped with debug activated with environment variable DEBUG=bpmn-engine:*. You can also provide your own logger.
More granular debugging can be achieved by filtering on element type:
DEBUG=*scripttask*,*:error:*
or on Windows PowerShell:
$env:DEBUG='bpmn-engine:*'
and to turn it off you need to:
$env:DEBUG=''

The bpmn-engine resides upon the excellent library bpmn-io/bpmn-moddle developed by bpmn.io
All diagrams are designed with Camunda modeler.
FAQs
BPMN 2.0 execution engine. Open source javascript workflow engine.
The npm package bpmn-engine receives a total of 1,119 weekly downloads. As such, bpmn-engine popularity was classified as popular.
We found that bpmn-engine demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.