
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
轻量级 JavaScript RESTful 服务端框架,NPM 包名 easy-rest。
DataModel(context, data)
DataModel.Hash2SQL(data, assign, separator)
DataModel.prototype.valueOf()
DataModel.prototype.search( query )
DataModel.prototype.append()
DataModel.prototype.update()
DataModel.prototype.remove()
Observer.prototype.on(event, callback)
Observer.prototype.before(event, callback)
Observer.prototype.emit(event, callback)
Observer.prototype.off(event, callback)
Observer.prototype.one(event, callback)
Observer.prototype.valueOf(event, key)
RestApp( option ) 继承自 Observer()
RestApp.prototype.get(url_pattern, callback)
RestApp.prototype.post(url_pattern, callback)
RestApp.prototype.put(url_pattern, callback)
RestApp.prototype.delete(url_pattern, callback)
RestApp.prototype.all(url_pattern, callback)
RestApp.prototype.trig(type, data)
自定义路由 —— LIFO
前者不匹配、失败,则匹配 FIFO 的 model 事件回调
按 RESTful URL 匹配出的 ./data/last_name_of_url 模块,应为 DataModel() 的实现类,并将以上一步的返回值为原始数据来实例化
而后与 HTTP 方法对应的实例方法会被调用,执行数据存取
前面的处理均无效时,会查找 ./public/ 下的同路径文件,并默认以其格式对应的 MIME-Type 响应
若 Accept 请求头为 application/octet-stream,文件响应则为下载
POST /./public/ 子目录中FAQs
Lightweight RESTful HTTP Server
The npm package easy-rest receives a total of 8 weekly downloads. As such, easy-rest popularity was classified as not popular.
We found that easy-rest demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.