
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
http-server-basicauth-ssl
Advanced tools
a simple zero-configuration command-line http server securised with https & basicauth
http-server-basicauth-ssl is a simple, zero-configuration command-line securised Http Server based on :
The main purpose was to have the same usefull tool as http-server but with more flexibility and security.
It is powerful enough for production usage, but it's simple and hackable enough to be used for testing, local development, and learning.
Installation via npm. If you don't have npm yet:
curl https://npmjs.org/install.sh | sh
Once you have npm:
npm install http-server-basicauth-ssl -g
This will install http-server-basicauth-ssl globally so that it may be run from the command line.
http-server-basicauth-ssl [path] [options]
[path] defaults to ./public if the folder exists, and ./ otherwise.
mkdir myapp
cd myapp/
jitsu install http-server-basicauth-ssl
If you do not have jitsu installed you can install it via npm install jitsu -g
node bin/http-server-basicauth-ssl
Now you can visit http://localhost:8080 to view your server
jitsu deploy
You will now be prompted for a subdomain to deploy your application on
-p Port to use [8080]
-a Address to use [0.0.0.0]
-d Show directory listings [true]
-i Display autoIndex [true]
-o Open browser window after staring the server
-c Set cache time (in seconds). e.g. -c10 for 10 seconds To disable caching, use -c-1.
-e --ext Default file extension if none supplied [none]
-s --silent Suppress log messages from output
-h --help Print this list and exit.
--user User name for basic authenication [none]
--pass Password for basic authenication [none]
--cors Enable CORS via the 'Access-Control-Allow-Origin' header
-S --ssl Enable https.
-C --cert Path to ssl cert file (default: cert.pem)
-K --key Path to ssl key file (default: key.pem)
-h --help Print this list and exit."
FAQs
a simple zero-configuration command-line http server securised with https & basicauth
We found that http-server-basicauth-ssl demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.