Research
Security News
Malicious PyPI Package ‘pycord-self’ Targets Discord Developers with Token Theft and Backdoor Exploit
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Don't want to show certain test routes on production? use Glee! Glee allows you to specify environment-specific scopes for your routes with ease. It utilizes minimatch to compare a route's optional scope to the current node environment, and will filter out any routes from the array that don't match the criteria before registering them.
npm install glee
If a route's scope is set to
!production
The route will be registered when the environment is not "production". Conversely, if the route's scope is set to
development
The route will only be registered if the environment is "development".
Given the following scope:
+(development|staging)
The route will be registered if the environment is either "development", or "staging". You can read more about using minimatch here.
/**
* Step 1. Define the routes.
*/
var routes = [
{
method: 'GET',
path: '/',
handler: function (request, reply) {
return reply('Hello, World.\n');
}
}, {
method: 'GET',
path: '/ping',
handler: function (request, reply) {
return reply('Pong!\n');
},
config: {
plugins: {
glee: {
// Register this route only if the environment
// is not "production".
scope: '!production'
}
}
}
}
];
/**
* Step 2. Register the plugin.
*/
server.register([
{
register: require('glee'),
options: {
routes: routes,
environment: 'development'
}
}
], function (err) {});
Name | Type | Description | Required |
---|---|---|---|
routes | array | Our Hapi routes. | Yes |
environment | string | The server environment. This is what we will compare a route's scope to. Defaults to process.env.NODE_ENV | No |
MIT
FAQs
Specify environment-specific scopes for your routes with ease.
We found that glee demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.