
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
drupal-node.js
Advanced tools
Server app for the Node.js Integration Drupal module. https://www.drupal.org/project/nodejs
Use one of the following two methods to download the app:
Install using NPM by running npm install drupal-node.js. Note that the
app will be installed in the node_modules subdirectory
Download the
latest release from
GitHub. Unzip, and run npm install in the app's directory to install the
dependencies
In both cases, be sure the install the app outside of Drupal's root directory.
Copy the example configuration file (nodejs.config.js.example) to
nodejs.config.js. Edit that file and make any necessary configuration changes.
See nodejs.config.js.example
for details on the configuration values. As a minimum, you will need to set the
serviceKey, and specify the location of your Drupal site in the backend
property. The service key can be any arbitrary string, but be sure to enter the
same service key in Drupal.
If you set scheme: 'https' you will need to set sslKeyPath and sslCertPath
Start the app using the node command.
node app.js
This will run the app in the foreground. For production use, it is more practical to run the app in the background. One way to achieve this is starting the app with forever.
forever start app.js
Not only will forever start the app in the background, but it will monitor it and automatically restart it if the app quits.
Visit the status report on your Drupal site to verify if Drupal is able to communicate with the server app.
FAQs
Push notifications from Drupal.
We found that drupal-node.js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.