Comparing version
{ | ||
"name": "dev-proxy", | ||
"version": "0.0.1-security", | ||
"description": "", | ||
"main": "index.js", | ||
"scripts": { | ||
"test": "echo \"Error: no test specified\" && exit 1" | ||
}, | ||
"version": "2.0.0", | ||
"author": [ | ||
"Cameron Hunter <hello@cameronhunter.co.uk>", | ||
"Nicholas Clawson <nickclaw@gmail.com>" | ||
], | ||
"description": "Simple SSL HTTP proxy using a self-signed certificate. Intended for local development only.", | ||
"repository": { | ||
"type": "git", | ||
"url": "git+https://github.com/npm/security-holder.git" | ||
"url": "http://github.com/nickclaw/dev-proxy.git" | ||
}, | ||
"keywords": [], | ||
"author": "", | ||
"license": "ISC", | ||
"bugs": { | ||
"url": "https://github.com/npm/security-holder/issues" | ||
"license": "MIT", | ||
"bin": { | ||
"dev-proxy": "bin/dev-proxy" | ||
}, | ||
"homepage": "https://github.com/npm/security-holder#readme" | ||
"files": [ | ||
"resources", | ||
"bin" | ||
], | ||
"scripts": { | ||
"install": "./bin/create-keys" | ||
}, | ||
"dependencies": { | ||
"chalk": "^1.1.3", | ||
"commander": "^2.9.0", | ||
"http-proxy": "^1.15.1", | ||
"pem": "^1.9.4" | ||
}, | ||
"devDependencies": {} | ||
} |
@@ -1,9 +0,38 @@ | ||
# Security holding package | ||
dev-proxy | ||
=============== | ||
This package name is not currently in use, but was formerly occupied | ||
by another package. To avoid malicious use, npm is hanging on to the | ||
package name, but loosely, and we'll probably give it to you if you | ||
want it. | ||
Simple SSL HTTP proxy using a self-signed certificate. Intended for local development only. Based off of [local-ssl-proxy](https://github.com/cameronhunter/local-ssl-proxy). | ||
You may adopt this package by contacting support@npmjs.com and | ||
requesting the name. | ||
``` | ||
Usage: dev-proxy [options] | ||
Options: | ||
-h, --help output usage information | ||
-V, --version output the version number | ||
-p --proxy <source:target> ports to proxy | ||
-k --key [keyPath] optional path to key file | ||
-c --cert [certPath] optional path to cert file | ||
-h --host [hostname] optional hostname | ||
``` | ||
Install | ||
------- | ||
```sh | ||
npm install -g dev-proxy | ||
# will automatically generate a self-signed cert/key | ||
``` | ||
Run | ||
--- | ||
To start a proxying from port `9000` to `9001` run: | ||
```sh | ||
dev-proxy --proxy 9000:9001 | ||
``` | ||
To create multiple proxies run: | ||
```sh | ||
dev-proxy --proxy 8080:8443 --proxy 9080:9443 | ||
``` | ||
Start your web server on the source port (`9000` in the example) and navigate to `https://localhost:<target-port>` ([https://localhost:9001](https://localhost:9001) in the example). You'll get a warning because the certificate is self-signed, this is safe to ignore during development. |
Install scripts
Supply chain riskInstall scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
No contributors or author data
MaintenancePackage does not specify a list of contributors or an author in package.json.
Found 1 instance in 1 package
No bug tracker
MaintenancePackage does not have a linked bug tracker in package.json.
Found 1 instance in 1 package
No website
QualityPackage does not have a website.
Found 1 instance in 1 package
Known malware
Supply chain riskThis package is malware. We have asked the package registry to remove it.
Found 1 instance in 1 package
No contributors or author data
MaintenancePackage does not specify a list of contributors or an author in package.json.
Found 1 instance in 1 package
No tests
QualityPackage does not have any tests. This is a strong signal of a poorly maintained or low quality package.
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
8012
900.25%8
300%1
-50%39
290%0
-100%4
Infinity%3
50%1
Infinity%2
100%+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added