
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
bugsplat-node
Advanced tools
BugSplat-node is a JavaScript error reporting system for Node.js and Electron applications. Before continuing with the tutorial please make sure you have completed the following checklist:
To add the bugsplat package to your application, run the following shell command at the root of your project’s directory:
npm install --save bugsplat-node
Require the bugsplat module at the entry point of your application.
const { BugSplatNode } = require("bugsplat-node");
Create a new instance of the BugSplat class with the name of your BugSplat database, the name of your application and the version of your application:
const bugsplat = new BugSplatNode("DatabaseName", "AppName", "1.0.0.0");
Set the bugsplat.post function as an event handler for uncaught exceptions:
process.on("uncaughtException", bugsplat.postAndExit);
If your application uses promises you will also want to listen for unhandled promise rejections. Please note that this will only work for native promises:
process.on("unhandledRejection", bugsplat.postAndExit);
Throw an exception after the event handler has been added.
throw new Error("BugSplat!");
You can also use bugsplat-node to post errors from non-fatal promise rejections and errors that originate inside of try-catch blocks:
Promise.reject(new Error("BugSplat!")).catch(error => bugsplat.post(error, {}));
try {
throw new Error("BugSplat");
} catch(error) {
await bugsplat.post(error, {});
}
After posting an error with bugsplat-node, navigate to the Crashes page. You should see a new crash report for the application you just configured. Click the link in the ID column to see details about your crash on the Crash page:
That’s it! Your application is now configured to post crash reports to BugSplat.
In addition to the configuration demonstrated above, there are a few public methods that can be used to customize your BugSplat integration:
bugsplat.setDefaultAppKey(appKey); // Additional metadata that can be queried via BugSplat's web application
bugsplat.setDefaultUser(user); // The name or id of your user
bugsplat.setDefaultEmail(email); // The email of your user
bugsplat.setDefaultDescription(description); // Additional info about your crash that gets reset after every post
bugsplat.setDefaultAdditionalFilePaths(paths); // Paths to files to be added at post time (limit 10MB)
bugsplat.postAndExit(error); // Wrapper for post that calls process.exit(1) after posting error to BugSplat
bugsplat.post(error, options); // Posts an arbitrary Error object to BugSplat
// If the values options.appKey, options.user, options.email, options.description, options.additionalFilePaths are set the corresponding default values will be overwritten
// Returns a promise that resolves with properties: error (if there was an error posting to BugSplat), response (the response from the BugSplat crash post API), and original (the error passed by bugsplat.post)
It is recommended that you exit and restart your application after an uncaughtException or unhandledRejection occurs. Packages such as pm2 and forever can be configured to restart your application.
Additionally you can use domains to handle errors differently across various parts of your application. Domains are pending deprecation according the the Node.js documentation, however a suitable replacement has not been added yet.
More information regarding domain deprecation can be found here.
BugSplat loves open source software! Please check out our project on GitHub and send us a pull request. Found an bug or have a feature request? Open an issue and we'll address it.
FAQs
BugSplat integration for node.js 12+
We found that bugsplat-node demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.