
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
dev-service-host
Advanced tools
A development-oriented wrapper around service-host.
Provides:
__clear_cache - Host cache clearing__hot_load - Hot-loading of services__shutdown - Start the shut down of a running host. If
you want a guarantee that the host has completed the
shutdown, call bin/stop.js__status - Host status (config, services available, etc)npm install dev-service-host
# Start a dev host in a detached process
node bin/start.js # exits once the host is listening
# Start a dev host in a blocking process
node bin/start.js --blocking # exits once the host has stopped
# Stop a running dev host
node bin/stop.js # exits once the host has stopped
All commands accept an optional --config option which allows
you to configure/target a host.
If your host is running at an address/port other than the defaults,
make sure that you pass that config into bin/stop.js so that it
knows where to find the host.
var DevHost = require('dev-service-host');
var host = new DevHost();
host.listen();
// see service-host for more usage examples
In addition to the normal config, dev hosts support
{
// An optional number indicating that the host should shut
// down after a period of inactivity. Inactivity is measured
// as the time since the last request. The value should be
// measured in milliseconds. This option is only activated
// if the host starts listening.
inactivityShutdownDelay: null
}
FAQs
Development wrapper around service-host
We found that dev-service-host demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.