
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
hapi-msgpack
Advanced tools
HAPI plugin that automatically encodes response payloads and decodes request payloads.
This plugin is compatible with most HAPI versions.
npm install hapi-msgpack
or using Yarn:
yarn add hapi-msgpack
npm install hapi-msgpack@^1.x.x
or using Yarn:
yarn add hapi-msgpack@^1.x.x
Register the plugin like so:
const server = new Hapi.Server();
const plugin = {
plugin: require('hapi-msgpack'),
options: {
mimeType: 'application/x-msgpack',
// preEncode: (payload) => { return payload; } // optional hook to modify payload before encoding
}
};
await server.register(plugin);
await server.start();
// ... off you go ...
Options are entirely optional. Defaults are:
mimeType: application/x-msgpack – Change this if you wish to use a different mime-type for MessagePack requests/responses.preEncode: (payload) => { return payload; } – Hook function which allows modification of the response payload before encoding.And that's about it. The plugin hooks into the request and reponse process, so you don't need to add any special handling of MessagePack data. It's decoded as if it were sent as JSON in the first place.
Internal Error Handling
request.log an error and return 400 Bad Request if the message pack data is corrupt. The event tags are: ['error','msgpack','decode']request.log a warning if the request payload is not decode-able. The event tags are: ['warning','msgpack','decode']Route Validation
Code Quality
To run the full test suite:
npm run report
This will perform:
All of the built-in test scripts are:
npm run clean – Removes code coverage directories
npm run test – Runs unit tests
npm run cover – Runs unit tests with code coverage
npm run lint – Runs eslint code rules checks
npm run report – Runs unit tests with code coverage and code rules checks
When contributing, please ensure your changes are 100% covered by tests.
FAQs
MessagePack support for HAPI requests and responses
We found that hapi-msgpack demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.