
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
howtonode.org
Advanced tools
This is a community supported blog about how to program in nodejs.
This is powered by a new static blog engine written in node called wheat.
To run a local version of the blog, simply install wheat and it's dependencies, node.JS v0.1.101 or later.
If you have spark installed, just type spark in this directory. If not, append .listen(3000) right before the closing semicolon and run it with node app.js
You can get a working wheat environment out of the box with ivy.
The best way to contribute is to fork this repository and add your article. If this is your first article, then please add an entry for yourself in the authors directory as well.
Every article is a markdown file with some meta-data at the top of the file.
Title: Control Flow in Node Part II
Author: Tim Caswell
Date: Thu Feb 04 2010 02:24:35 GMT-0600 (CST)
Node: v0.1.91
I had so much fun writing the last article on control flow, that I decided to...
## First section: Display JavaScript files
* display contents of external JavaScript file (path is relative to .markdown file)
<test-code/test-file.js>
* display contents of external JavaScript file and evaluate its contents
<test-code/evaluate-file.js*>
More content goes here.
Every author has a markdown file located in authors folder. You should name this file by your name and surname Name Surname.markdown.
Github: your_github_account
Email: your_email@domain.com
Homepage: http://yourhomepage.com
Twitter: your_twitter_account
Location: City, State, Country
A few words about you.
Please check if the project is still working after you add your contribution to it. You can run the project in three easy steps:
npmpackages: npm installnode server/server.jshttp://localhost:8080More docs to come soon...
All articles are copyright to the individual authors. Authors can put notes about license and copyright on their individual bio pages if they wish.
FAQs
The popular blog howto.no.de
We found that howtonode.org demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.