Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
detect-libc
Advanced tools
Node.js module to detect the C standard library (libc) implementation family and version
The detect-libc npm package is a simple utility for detecting the C standard library version on a system. It is primarily used in node-gyp and prebuild-install to ensure binary compatibility with the host system's libc when compiling native addons.
Detecting the system's C library
This feature allows you to detect the C library family (e.g., glibc, musl) and version used by the system. This is useful for determining binary compatibility for native modules.
const detectLibc = require('detect-libc');
const libcFamily = detectLibc.family;
const libcVersion = detectLibc.version;
console.log(`Libc Family: ${libcFamily}`);
console.log(`Libc Version: ${libcVersion}`);
Checking if the system uses a specific C library
This feature provides a boolean check to determine if the system is using a non-glibc C library, which can be important for certain build processes and compatibility checks.
const detectLibc = require('detect-libc');
if (detectLibc.isNonGlibcLinux) {
console.log('The system uses a non-glibc C library.');
} else {
console.log('The system uses glibc.');
}
node-pre-gyp is a package that provides a way to publish and install Node.js C++ addons from binaries. It has functionality to detect the platform and libc to download the correct binary for the system. It is more complex and feature-rich than detect-libc, as it handles the full lifecycle of binary management.
prebuild is a package that helps in automating prebuilt binaries for Node.js modules. It also has the capability to detect libc for ensuring the correct binaries are used. Compared to detect-libc, prebuild is part of a larger system for managing prebuilt binaries rather than just detecting libc.
Node.js module to detect the C standard library (libc) implementation family and version in use on a given system.
Provides a value suitable for use with the libc
option of
prebuild,
prebuild-ci and
prebuild-install,
therefore allowing build and provision of pre-compiled binaries
for musl-based Linux e.g. Alpine as well as glibc-based.
Currently supports libc detection on Linux (glibc, musl) and OS X (bsd).
npm install detect-libc
Command line tool that spawns the child command
with the LIBC
environment variable set to the value of the system libc family.
const { family, version } = require('detect-libc');
family
is a String representing the system's libc family.version
is a String representing the system's libc version. "scripts": {
"install": "detect-libc prebuild-install || node-gyp rebuild",
"test": "mocha && detect-libc prebuild-ci"
},
"dependencies": {
"detect-libc": "^0.0.4",
"prebuild-install": "^2.1.2"
},
"devDependencies": {
"prebuild": "^6.2.0",
"prebuild-ci": "^2.2.2"
}
Copyright 2017 Lovell Fuller
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
FAQs
Node.js module to detect the C standard library (libc) implementation family and version
The npm package detect-libc receives a total of 18,987,138 weekly downloads. As such, detect-libc popularity was classified as popular.
We found that detect-libc demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.