
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
davefeedread
Advanced tools
If you came here looking for a super-simple way to read a feed in Node.js, this is no longer the simplest or best API I have. The new package is reallySimple it's open source too, and it builds on this package, so this is still being maintained.
If you're using this package and are happy, keep using it. ;-)
6/22/23 by DW
It's a Node package that contains everything you need to read a feed.
It builds on the feedParser package. It's simpler to call, no need to master streams or iconv.
You can also parse a string, so you can deal with files that contain feed data, not just feeds accessible over the web. Or the feed text could come from a database.
Because we use feedParser, we handle all the formats and variability that it handles.
It's an entry-level feed parser that will be useful to people who haven't mastered all of JavaScript.
Sometimes you need to quickly read a feed and do something with it, and don't have time for a major project. This package is for those times.
It also provides good sample code for more advanced feed reading projects.
There are two very basic examples, one that parses a feed that it reads over the web, and one that it reads from a local file.
A third example is a realistic feed polling app, it checks a feed every five minutes and writes the JSON structure out to a local disk. It automatically supports rssCloud, so you get realtime updates if the feed supports that protocol, which is part of RSS 2.0.
FAQs
Read a feed and call back with a JavaScript structure.
The npm package davefeedread receives a total of 63 weekly downloads. As such, davefeedread popularity was classified as not popular.
We found that davefeedread demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.