Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
davefeedread-sankemax
Advanced tools
Read a feed and call back with a JavaScript structure.
If you came here looking for a super-simple way to read a feed in Node.js, this is no longer the simplest or best API I have. The new package is reallySimple it's open source too, and it builds on this package, so this is still being maintained.
If you're using this package and are happy, keep using it. ;-)
6/22/23 by DW
It's a Node package that contains everything you need to read a feed.
It builds on the feedParser package. It's simpler to call, no need to master streams or iconv.
You can also parse a string, so you can deal with files that contain feed data, not just feeds accessible over the web. Or the feed text could come from a database.
Because we use feedParser, we handle all the formats and variability that it handles.
It's an entry-level feed parser that will be useful to people who haven't mastered all of JavaScript.
Sometimes you need to quickly read a feed and do something with it, and don't have time for a major project. This package is for those times.
It also provides good sample code for more advanced feed reading projects.
There are two very basic examples, one that parses a feed that it reads over the web, and one that it reads from a local file.
A third example is a realistic feed polling app, it checks a feed every five minutes and writes the JSON structure out to a local disk. It automatically supports rssCloud, so you get realtime updates if the feed supports that protocol, which is part of RSS 2.0.
FAQs
Read a feed and call back with a JavaScript structure.
We found that davefeedread-sankemax demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.