
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
One-command dev server launcher that maps your git branch to .localhost with a built-in reverse proxy (no permanent daemon).
One-command dev launcher that maps your current git branch to <branch>.localhost without thinking about ports. No permanent daemon required.
<branch>.localhost → port.:80 (starts when needed, stops when last route is removed).~/.devwarp/routes.json; no repo pollution.npx devwarp <your dev command>
Examples:
npx devwarp pnpm run devnpx devwarp npm run dev -- --host 0.0.0.0npx devwarp pnpm run web -- --web → uses --web-port automaticallyThen open http://<branch>.localhost in your browser. DevWarp prints the exact URL; if :80 is unavailable it falls back to :8080 and shows http://<branch>.localhost:8080.
This repo ships with three small demo apps under demo/feature-* (シンプルなToDo UI付き Hono アプリ)。
cd demo/feature-a && npm installnpm run devhttp://main.localhost or :8080 if :80 is blocked).Use demo/run-all.sh to start all demos in parallel; demo/run-all.sh stop stops them and the proxy.
git rev-parse --abbrev-ref HEAD) and slugify → <branch>.localhost.PORT/DEVWARP_PORT and --port <picked> injected (if not already present).~/.devwarp/routes.json.:80; if not, start devwarp --proxy (tries sudo first, then plain node if :80 is allowed).--proxy-port <port>: run the proxy on a custom port (default 80). Helpful if sudo不可な環境で :80 が塞がっている場合。--gc: garbage-collect stale routes (removes entries whose ports are not listening).--stop-proxy: stop the running proxy (uses pidfile at ~/.devwarp/proxy.pid).--port、Expo Webは --web-port を要求するため、自動判別して適切なポートフラグを挿入します(--web または --web-only が args にある場合は --web-port を追加)。:80 may require sudo on your OS. devwarp tries sudo -n first, then plain node; if neither works, it warns and you can start the proxy manually with elevated privileges: sudo devwarp --proxy.~/.devwarp/routes.json or run your dev commands again to refresh.0.1.0
MIT
FAQs
One-command dev server launcher that maps your git branch to .localhost with a built-in reverse proxy (no permanent daemon).
The npm package devwarp receives a total of 1 weekly downloads. As such, devwarp popularity was classified as not popular.
We found that devwarp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.