
Research
Node.js Fixes AsyncLocalStorage Crash Bug That Could Take Down Production Servers
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.
eyeball-mk-1
Advanced tools
A global CLI package that scans the current directory and diffs package.json with require statements
npm install eyeball-mk-1 -g
eyeball - will check what's missing from package.json and create a list ignoring core modules and relative paths. Read only.
eyeball -f - will fix your package.json with packages that are required but not listed in dependencies. Uses 4 spaces for indentation when writing to package.json.
I spent a long time looking for the eyeball-mk-1 package before I realised what my colleague was referring to meant 'just looking at it'. Nobody needs to go through that again now. Eyeball finds all the require statements in your directory and lists them.
It can also auto-fix the package.json file by adding anything missing. If the module is installed it will get the version number of that module from node_modules/MODULE/package.json, else it will use * as the version. If there are uninstalled modules, run npm install after eyeball.
Run it in the same directory as your package.json. Eyeball will not recursively seek upwards through directories.
FAQs
A global CLI package that scans the current directory and diffs package.json with require statements
We found that eyeball-mk-1 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.