
Product
Introducing Supply Chain Attack Campaigns Tracking in the Socket Dashboard
Campaign-level threat intelligence in Socket now shows when active supply chain attacks affect your repositories and packages.
A package exposing the data from nodebug.me. Contains both a CLI and require-able module.
$ bug-me
usage: bug-me [<options>]
-h, -?, --help show this help
-r, --reproducible show issues with reproduction steps
-c, --consensus show issues that have consensus on a solution
-d, --duplicates show issues that have duplicates
-w, --wrong-repo show issues that are in the wrong repo
-f, --is-feature show issues that have been approved as features
by a core team member
-v, --version <ver> show issues that have been reproduced
against version <ver>, with acceptable values
of "0.10" or "0.11"
$ bug-me -c -f
# ... all issues that have consensus or are features ...
Or from Node:
var concat = require('concat-stream');
var bugs = require('bug-me');
bugs().pipe(concat(function(bugReports) {
bugReports.length
}))
bugs() → Readable Stream<BugReport>Bugs will return an objectMode readable stream of bug report objects, suitable for piping to an objectMode writable stream.
BugReportAn object tallying the results of bug reports for a given github issue. Detailed here.
MIT
FAQs
get a bug to look at based on what you're interested in
The npm package bug-me receives a total of 4 weekly downloads. As such, bug-me popularity was classified as not popular.
We found that bug-me demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Campaign-level threat intelligence in Socket now shows when active supply chain attacks affect your repositories and packages.

Research
Malicious PyPI package sympy-dev targets SymPy users, a Python symbolic math library with 85 million monthly downloads.

Security News
Node.js 25.4.0 makes require(esm) stable, formalizing CommonJS and ESM compatibility across supported Node versions.