
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A NodeJS library for effective customer churn calculation.
Every day that a customer keeps their subscription is another day when they didn’t churn. If they are your customer for ten days and churned on the tenth day, they had ten opportunities to churn, and exercised that option on one of the ten days. Another way to think about this is that they churned on 1/10 of the days that they could have churned.
You can aggregate that probability across all of your customers and come up with a more accurate churn rate.
npm install butterjs
Basic example:
var Butter = require('butterjs');
var churn = new Butter(startCount, endCount, totalChurn, activity, days).churn();
startCount = customers at the start of the period
endCount = customers at the end of the period
totalChurn = existing customers who churned + new customers who churned
activity = the percentage of your user activity in the time interval (best calculated by summing user activity over each day in the period)
days = time interval
FAQs
A NodeJS library for effective customer churn calculation.
We found that butterjs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.