Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
CLI tool that optimizes & deploys your Firebase Functions so they run faster and have shorter cold starts
Fireshaker is a CLI tool that automatically optimizes & deploys your Firebase Functions.
Usually, the more Firebase Functions you have in one project the more dependencies you add. Even the Functions that are not using these dependencies have them installed in their node_modules. This slows both cold and warm starts of your functions.
Almost always more than half of the modules can be removed. Thus the functions can start proportionally faster.
For example - in the first project that we helped to optimize we reduced the size of the node_modules by 53% on average.
When you deploy Firebase Functions the whole functions folder gets uploaded and all the dependencies in the package.json
are installed even when they are not used in the function that you have deployed.
We solve that by isolating Firebase Functions that are statically exported from the index.ts then prunning their source code and dependencies. The whole process looks like this:
npm build
script from functions package.json
Fireshaker currently supports only Firebase Functions. General Google Cloud Functions aren't supported right now but it's on the roadmap.
This will install Fireshaker as a CLI. Requires at least Node.js 10.
npm i -g fireshaker
Navigate to the root of your project (where is your firebase.json
file) and deploy your functions the same way as you would with the Firebase CLI. Fireshaker respects your Firebase configuration.
Your Firebase functions need to be statically exported from your root index.ts
file.
fireshaker deploy func1 func2 func3
fireshaker deploy
FAQs
CLI tool that optimizes & deploys your Firebase Functions so they run faster and have shorter cold starts
The npm package fireshaker receives a total of 0 weekly downloads. As such, fireshaker popularity was classified as not popular.
We found that fireshaker demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.