Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Bunyan / Pino Logger instance ready to use
Bunyan is really great for debugging purposes but Pino is crazily fast.
Thinking about that this package was created to use Bunyan whenever the
LOG_LEVEL environmental variable is set to debug
or trace
;
npm install em-loger --save
Logr will use bunyan if the LOG_LEVEL environmental variable has the values trace or debug and it will also enable the src option of bunyan automatically, which displays the filename along side with the line number on each log message.
Using LOG_LEVEL environmental variable with the values info, warn or trace will load pinojs which is faster and has a very similar api.
const logr = require('em-logr');
logr.trace('My trace message');
logr.debug('My debug message');
logr.info('My info message');
logr.warn('My warn message')
logr.error('My error message');
Child loggers
const
_1stChildLogr = require('em-logr').child({name:'1stChild'}),
_2ndChildLogr = require('em-logr').child({name:'2ndChild'});
_1stChildLogr.info("The remote is mine, I am the first born child");
_2ndChildLogr.info("The remote is mine, Mom likes me better");
_1stChildLogr.warn("Get out of here or I'll hit you in the face!");
_2ndChildLogr.info("Do not touch me or I'll tell mom to know about secret.");
_1stChildLogr.error("I did' see that coming!");
FAQs
Bunyan/Pino Logger instance ready to use
We found that em-logr demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.