
Security News
Feross on TBPN: How North Korea Hijacked Axios
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.
hapijs/call for browsers. Supports all modern browsers, tested on IE 9+, Chrome 16+, FireFox 5+, Safari 6+, Opera 12+.
The router iterates through the routing table and executes the first (and only the first) matching route. Route matching is done based on the combination of the request path and the HTTP verb (e.g. 'GET, 'POST'). The query is excluded from the routing logic. Requests are matched in a deterministic order where the order in which routes are added does not matter.
Routes are matched based on the specificity of the route which is evaluated at
each segment of the path. Each path is split into its segment (the parts
separated by '/'). The segments are compared to the routing table one at a
time and are matched against the most specific path until a match is found. If
no match is found, the next match is tried.
When matching routes, string literals (no path parameter) have the highest
priority, followed by mixed parameters ('/a{p}b'), parameters ('/{p}'), and
then wildcard (/{p*}).
Note that mixed parameters are slower to compare as they cannot be hashed and require an array iteration over all the regular expressions representing the various mixed parameter at each routing table node.
If the application needs to override the default Not Found (404) error
response, it can add a catch-all route {method: '*', path: '/{p*}'} for a
specific method or all methods. Only one catch-all route can be defined per
router.
evoke is released under the terms of the BSD-3-Clause license.
Thanks to Eran Hammer and @hapijs community for the quality engineering behind hapi.
Thanks to BrowserStack for providing the infrastructure that allows us to run our build in real browsers.
FAQs
HTTP Router
We found that evoke demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.

Security News
OpenSSF has issued a high-severity advisory warning open source developers of an active Slack-based campaign using impersonation to deliver malware.

Research
/Security News
Malicious packages published to npm, PyPI, Go Modules, crates.io, and Packagist impersonate developer tooling to fetch staged malware, steal credentials and wallets, and enable remote access.