Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
ctx-module
Advanced tools
ctx-module.js
implements a CommonJS-style module system for NodeJS which has a high degree of
compatibility with the default module system, npm, etc -- but which exists in a separate vm context and
not share an exports object graph, cache, etc, with the default module system.
This library was created so that we could run unit tests of client-server architecture libraries which have namespace collisions and are intended to operate as singletons. Rather than making our tests rely on starting/stopping external daemons, we create the daemon in the test and connect to it from the same client. This also lets us deeply inspect the state of both components during a test, and step through both sides of a conversation with a single debugger.
This module system is sufficiently complete to load Distributive's dcp-client
library, which has
signficant dependencies and tinkers with module filename resolution.
module
module with a Module class with limited support for userland manipulation of
_resolveFilename, _cache, etc.vm
module so that "this context" refers to CtxModule's contextLoad node modules into an alternate contextCtxModule constructor; creates a new module.
the context object in which the module will be created
optional string which is the canonical module id (usually filename) of the module. This parameter must be a filename for any module which wants to use require for relative-named modules.
optional per-ctx object which holds loaded modules, or strings which hold the filenames where the source code for the module is located. This parameter is necessary for any module which wants to use require. Properties of this object are either search-path or canonical module identifiers.
optional object which is an instanceof CtxModule or a CtxModule-duck which at least has a require method.
Factory function which creates a fresh context suitable for running NodeJS programs. Default modules such as fs, os, vm, path, process, tty, etc, are linked from the calling context.
optional string which specifies the name of the context
optional object shaped like moduleCache which can inject modules from the outer context. Each property name is either the canonical module identifier (usually a rooted pathname) or a search-path module identifier (eg "path"). Each property must be either a string containing the module's filename, or an object containing the module's exports.
const vm = require('vm');
const ctx = require('ctx-module').makeNodeProgramContext();
vm.runInContext('require("dcp-client").init()', ctx).then(console.log('initialized dcp-client'));
Wes Garland, Distributive Corp.
Released under the terms of the MIT License; see LICENSE file.
FAQs
Load node modules into specific context
The npm package ctx-module receives a total of 184 weekly downloads. As such, ctx-module popularity was classified as not popular.
We found that ctx-module demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.