
Security News
Feross on TBPN: How North Korea Hijacked Axios
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.
directory-router
Advanced tools
dr (Directory Router) is a CLI tool for building Node.js API services using file-based routing, inspired by Next.js and Vercel's API route structure. It works with frameworks like Koa, Express, or Hono, and allows seamless development, build, and production deployment workflows.📂 File-based routing for APIs
🛠 CLI commands: dev, build, start
📦 Bundling with esbuild
A .drrc file should be located at the root of your API service.
{
"root": "src",
"outDir": ".dr",
"engine": "koa"
}
root: Folder where API routes are defined
outDir: Build output folder
engine: Framework engine to use (e.g., koa)
yarn add dr
Make sure to also install the server engine defined in your .drrc (e.g., koa).
yarn add koa
Replace koa with express or hono if you're using a different engine.
api-service/
├── src/
│ └── api/
│ ├── hello.ts
│ └── user/
│ └── profile.ts
├── .drrc
├── package.json
└── tsconfig.json
dr dev🧑💻 dr dev
Watches for file changes
Hot reload on file update
🔨 dr build
Uses esbuild to bundle API into .dr
Retains API structure
🔥 dr start
Ensure .drrc is correctly configured.
You can use middleware or plugins later with .drrc extensions.
Currently supports koa only.
Open an issue or feature request on the GitHub repo!
FAQs
Custom CLI to generate file-based APIs with dynamic routing
The npm package directory-router receives a total of 1 weekly downloads. As such, directory-router popularity was classified as not popular.
We found that directory-router demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.

Security News
OpenSSF has issued a high-severity advisory warning open source developers of an active Slack-based campaign using impersonation to deliver malware.

Research
/Security News
Malicious packages published to npm, PyPI, Go Modules, crates.io, and Packagist impersonate developer tooling to fetch staged malware, steal credentials and wallets, and enable remote access.