Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
feathers-cf-rest
Advanced tools
A feathers transport that exposes your services as a RESTful API on Cloudflare Workers
❗ This transport is very experimental. Use with caution.
feathers-cf-rest is a feathers transport for Cloudflare Workers.
It exposes your feathers services as a RESTful API.
$ npm i feathers-cf-rest
Here is an example of a Feathers application running on Cloudflare Workers with a dummy messages
service:
$ npm i @feathersjs/feathers@pre feathers-cf-rest itty-router
In index.mjs
:
import { Router } from 'itty-router'
import app from './feathers.mjs'
const router = Router()
router.all('*', app.handle)
router.all('*', (request, env) => {
return new Response('Not found', { status: 404 })
})
export default {
fetch: router.handle,
}
In feathers.mjs
:
import feathers from '@feathersjs/feathers'
import rest from 'feathers-cf-rest'
const app = feathers()
app.configure(rest)
app.use('messages', {
messages = [],
find(){
return this.messages
},
create(data){
this.messages.push(data)
return data
}
})
export default app
To test your app in development, I recommend using Miniflare since Wrangler CLI does not yet support Durable Objects.
$ miniflare --watch --debug
You should now be able to navigate to http://localhost:8787/messages to see the messages list.
To create a new message, simply make a HTTP POST request to http://localhost:8787/messages
You can publish your app to Cloudflare Workers.
$ wrangler publish
Copyright (c) 2021
Licensed under the MIT license.
FAQs
A feathers transport that exposes your services as a RESTful API on Cloudflare Workers
The npm package feathers-cf-rest receives a total of 0 weekly downloads. As such, feathers-cf-rest popularity was classified as not popular.
We found that feathers-cf-rest demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.