
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
fork-require
Advanced tools
Allows to "require" a file, while forking it into a child process.
This nifty little library makes spawning processes and interacting with them super easy. It will automatically fork any file you give it and proxy all method calls to the forked child process. All responses are returned via Promises and make it really easy to read with the async/await syntax.
An example might make it easier to understand. This will fork a new module and allow you to call any method on it.
const fork = require('fork-require');
let otherModule = fork('./otherModule');
let response = await otherModule.doSomething('Hello');
// => will print "Hello World" in a separate process.
The file you want to fork-require would look like this:
/*** otherModule.js ***/
exports.doSomething = function(val) {
console.log(val, 'World');
}
In your npm project directory run
npm i --save fork-require
There's only one method call available:
args <string[]> Allows you to set the arguments with which to spawn the process (Default: process.args)
env Allows you to set the environment properties with which to spawn the process (Default: process.env)
cwd Allows you to set the current working directory in which to spawn the process (Default: process.cwd())
execArgv <string[]> Allows you to set the executable (most likely node) arguments with which to spawn the process (Default: process.execArgv)
execPath Allows you to set the path to the executable with which to spawn the process (Default: process.execPath)
fixStack Allows you to see the original stack trace on errors instead of the adapted ones(Default: true)
There is no support for properties on target modules, so if you're trying to access those that won't work. Also you need to handle the response via Promises. If you don't use await/then() you will not get results, so don't forget.
To run the tests you must install the development dependencies along with the production dependencies
npm install fork-require
After that you can just run npm test to see an output of all existing tests.
I try to find all the bugs and have tests to cover all cases, but since I'm working on this project alone, it's easy to miss something. Also I'm trying to think of new features to implement, but most of the time I add new features because someone asked me for it. So please report any bugs or feature request to mallox@pyxzl.net or file an issue directly on Github. Thanks!
FAQs
Allows to "require" a file, while forking it into a child process.
The npm package fork-require receives a total of 16 weekly downloads. As such, fork-require popularity was classified as not popular.
We found that fork-require demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.