
Security News
Critical Security Vulnerability in React Server Components
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.
fh-express-stats
Advanced tools
Express Middleware to provide application statistics via the Statistics Tab in the FeedHenry Studio.
The following statistics will be added to the Statistics tab for your Cloud App automaitcally when using this module:
"Calls to route" will show the baseUrl and any subroutes independently.
Response Time for [ROUTE]
Install with NPM:
$ npm i fh-express-stats --save
Add to FeedHenry Express application. The fh-mbaas-api dependency must be installed in your project to use this.
var mbaasApi = require('fh-mbaas-api');
var express = require('express');
var mbaasExpress = mbaasApi.mbaasExpress();
var fhStats = require('fh-express-stats');
var cors = require('cors');
var app = express();
// Note: the order which we add middleware to Express here is important!
app.use('/sys', mbaasExpress.sys(securableEndpoints));
app.use('/mbaas', mbaasExpress.mbaas);
// Note: important that this is added just before your own Routes
app.use(mbaasExpress.fhmiddleware());
// Stats middleware can go here
app.use(fhStats(mbaasApi));
// fhlint-begin: custom-routes
app.use('/hello', require('./lib/hello.js')());
// fhlint-end
// Important that this is last!
app.use(mbaasExpress.errorHandler());
var port = process.env.FH_PORT || process.env.VCAP_APP_PORT || 8001;
var server = app.listen(port, function() {
console.log("App started at: " + new Date() + " on port: " + port);
});
Add any new statistics you think would be useful!
Simply run npm test to run tests from the root directory.
Stubs are used for testing, take a look at the test file and it should be clear how they work.
FAQs
Adds out of the box statistics to a FeedHenry Cloud App
We found that fh-express-stats demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.

Research
/Security News
We spotted a wave of auto-generated “elf-*” npm packages published every two minutes from new accounts, with simple malware variants and early takedowns underway.

Security News
TypeScript 6.0 will be the last JavaScript-based major release, as the project shifts to the TypeScript 7 native toolchain with major build speedups.