
Security News
The Nightmare Before Deployment
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.
detect-libc
Advanced tools
Node.js module to detect the C standard library (libc) implementation family and version
Node.js module to detect details of the C standard library (libc) implementation provided by a given Linux system.
Currently supports detection of GNU glibc and MUSL libc.
Provides asychronous and synchronous functions for the
family (e.g. glibc, musl) and version (e.g. 1.23, 1.2.3).
The version numbers of libc implementations are not guaranteed to be semver-compliant.
For previous v1.x releases, please see the v1 branch.
npm install detect-libc
const GLIBC: string = 'glibc';
A String constant containing the value glibc.
const MUSL: string = 'musl';
A String constant containing the value musl.
function family(): Promise<string | null>;
Resolves asychronously with:
glibc or musl when the libc family can be determinednull when the libc family cannot be determinednull when run on a non-Linux platformconst { family, GLIBC, MUSL } = require('detect-libc');
switch (await family()) {
case GLIBC: ...
case MUSL: ...
case null: ...
}
function familySync(): string | null;
Synchronous version of family().
const { familySync, GLIBC, MUSL } = require('detect-libc');
switch (familySync()) {
case GLIBC: ...
case MUSL: ...
case null: ...
}
function version(): Promise<string | null>;
Resolves asychronously with:
null when the libc family cannot be determinednull when run on a non-Linux platformconst { version } = require('detect-libc');
const v = await version();
if (v) {
const [major, minor, patch] = v.split('.');
}
function versionSync(): string | null;
Synchronous version of version().
const { versionSync } = require('detect-libc');
const v = versionSync();
if (v) {
const [major, minor, patch] = v.split('.');
}
function isNonGlibcLinux(): Promise<boolean>;
Resolves asychronously with:
false when the libc family is glibctrue when the libc family is not glibcfalse when run on a non-Linux platformconst { isNonGlibcLinux } = require('detect-libc');
if (await isNonGlibcLinux()) { ... }
function isNonGlibcLinuxSync(): boolean;
Synchronous version of isNonGlibcLinux().
const { isNonGlibcLinuxSync } = require('detect-libc');
if (isNonGlibcLinuxSync()) { ... }
Copyright 2017 Lovell Fuller and others.
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
node-pre-gyp is a package that provides a way to publish and install Node.js C++ addons from binaries. It has functionality to detect the platform and libc to download the correct binary for the system. It is more complex and feature-rich than detect-libc, as it handles the full lifecycle of binary management.
prebuild is a package that helps in automating prebuilt binaries for Node.js modules. It also has the capability to detect libc for ensuring the correct binaries are used. Compared to detect-libc, prebuild is part of a larger system for managing prebuilt binaries rather than just detecting libc.
FAQs
Node.js module to detect the C standard library (libc) implementation family and version
The npm package detect-libc receives a total of 55,370,194 weekly downloads. As such, detect-libc popularity was classified as popular.
We found that detect-libc demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.

Research
/Security News
Impostor NuGet package Tracer.Fody.NLog typosquats Tracer.Fody and its author, using homoglyph tricks, and exfiltrates Stratis wallet JSON/passwords to a Russian IP address.

Security News
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.