Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Federation is a federated event emitter for distributed environments.
Federation is inspired by Akka and Erlang, and borrows some semantics from the actor model. While there are actors, many features familiar to Akka and Erlang are not included. Federation prioritizes being useful to the Node.js community over being faithful to the pure actor model.
Federation considers cross-process and cross-host messaging to be the top priority.
It has been designed to sit above an application protocol like axon
or http
, and can be extended to any other protocol quite easily.
A good module evolves to meet the needs of the community. There are many ways you can help. Pull-requests are always welcome, but you don't have to be a programming expert to lend a hand.
$ npm install federation
Every actor has a name, and can receive messages at that name.
var director = require('federation').init().director;
var actorBob = director.createActor('bob');
var actorTom = director.createActor('tom');
Federation nodes can send and receive messages to each other.
Actors tell
each other messages with:
actorBob.tell('tom','Good Morning');
Telling a message is a fire-and-forget approach.
Actors receive messages by binding a callback to their onMessage
property:
actorTom.onMessage = function(message){
console.log('Got Message:', message);
}
The callback will be invoked as a method, so this
resolves to the actor object.
actorTom.onMessage = function(message){
this.tell('joe','Got Message!');
}
Actors can also ask
other actors questions that will receive replies.
actorBob.ask('tom','Are you happy?',function(err,happy){
if(err) return console.log('Error Asking Tom:',err);
if(happy){
console.log('Tom is Happy');
}else{
console.log('Tom is Not Happy');
}
});
The request-reply pattern uses anonymous actors known as extras.
An extra has a limited life span of 5000
by default.
If the timeout occurs before a reply is delivered,
a TIMEOUT
error will be send to your callback.
Federation supports inter-process communication, and abstracts the details away from the programmer.
Actors have names, any name you like. The nameing convention is up to you, but choosing a good convention will make routing easier. Each process has its own router and routing table. Since messages are addressed to other actors by name, the router matches names to URLs. Once a match is found, the message is sent to the remote process.
Routers have a default local route. Any message matching the default route will be delivered locally. Additional routes can be defined in a JSON-encoded routes file:
[
{
"regex": "hadoop/.*",
"address": "axon://10.0.1.12/"
},
{
"regex": "mongo/.*",
"address": "axon://10.0.1.122/"
}
]
Incoming messages are matched in-order against the regex
key.
The first match wins, and the packet is forwarded to the gateway at the destination address.
The default route will always be matched last.
The easiest way to add a routes file is by setting the table_file
key:
var federation = require('federation');
federation.defaults.table_file = process.env.ROUTES_FILE_PATH;
var director = federation.init().director;
See the example in Multi-Proc Example for two-process routing table. Routes can be the same, or different hosts.
Comprehensive documentation is kept in the wiki.
The wiki is open to anyone for improvement. Feel free to make constructive edits. If you are not sure about making a change, please ask first on the issue tracker.
The todo list is maintained under the issue tracker
Copyright (c) 2013 Jacob Groundwater (groundwater@gmail.com)
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
FAQs
Federated Node.js Actor Network
We found that federation demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.