
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
We integrated most popular and widely used packages for web development. Node.js web developer is now easily to start developing web application in minutes just like other web frameworks such as Laravel, Rails ...etc.
Startup services
> docker-compose up -d
Creating imhere_redis_1
Creating imhere_mysql_1
Creating imhere_phpmyadmin_1
Install tools
> npm install -g yarn
> npm install -g bower
> npm install -g bable-cli # for commands
> npm install -g pm2 # for deployment environment
> gem install bundler # for capistrano to deploy
> bundle install # for capistrano to deploy
Install npm and bower packages
> yarn
> bower i
Copy .env.sample to .env and change the setting
> cp .env.sample .env
Migration
> yarn db:create
> yarn db:migrate
Seed
> yarn db:seed
Start the service
> yarn start
yarn start v0.18.1
$ gulp serve
[19:25:50] Requiring external module babel-register
[19:25:50] Using gulpfile ~/projects/nodejs/imhere/gulpfile.babel.js
[19:25:51] Starting 'styles'...
[19:25:51] Starting 'images'...
[19:25:51] Starting 'attachments'...
[19:25:51] Starting 'lint:scripts'...
[19:25:51] Starting 'files'...
[19:25:51] Starting 'fonts'...
....
2017-01-08T11:25:54.207Z - info: App: listening on port 5000
Test users API
> curl http://localhost:5000/api/users
{
"users": [
{
"id": 1,
"name": "Test",
"email": "test@test.com",
"encrypted_password": "$2a$06$NkYh0RCM8pNWPaYvRLgN9.Tl30VHCXEDh66RKnuDJNBV0RLQSypWa",
"created_at": "2017-02-04T08:33:18.000Z",
"updated_at": "2017-02-04T08:33:18.000Z"
}
],
"pagination": {
"page": 1,
"pageSize": 50,
"rowCount": 1,
"pageCount": 1
}
}
Test github API
> curl http://localhost:5000/api/github/closed_issues
{
"issues": [{
"url": "https://api.github.com/repos/imheretw/imhere/issues/4",
"repository_url": "https://api.github.com/repos/imheretw/imhere",
"labels_url": "https://api.github.com/repos/imheretw/imhere/issues/4/labels{/name}",
"comments_url": "https://api.github.com/repos/imheretw/imhere/issues/4/comments",
"events_url": "https://api.github.com/repos/imheretw/imhere/issues/4/events",
"html_url": "https://github.com/imheretw/imhere/issues/4",
"id": 205337147,
"number": 4,
"title": "Kue screenshot",
"user": {
"login": "koshuang",
"id": 1978357,
"avatar_url": "https://avatars.githubusercontent.com/u/1978357?v=3",
"gravatar_id": "",
"url": "https://api.github.com/users/koshuang",
"html_url": "https://github.com/koshuang",
"followers_url": "https://api.github.com/users/koshuang/followers",
"following_url": "https://api.github.com/users/koshuang/following{/other_user}",
"gists_url": "https://api.github.com/users/koshuang/gists{/gist_id}",
"starred_url": "https://api.github.com/users/koshuang/starred{/owner}{/repo}",
"subscriptions_url": "https://api.github.com/users/koshuang/subscriptions",
"organizations_url": "https://api.github.com/users/koshuang/orgs",
"repos_url": "https://api.github.com/users/koshuang/repos",
"events_url": "https://api.github.com/users/koshuang/events{/privacy}",
"received_events_url": "https://api.github.com/users/koshuang/received_events",
"type": "User",
"site_admin": false
},
"labels": [
],
"state": "closed",
"locked": false,
"assignee": null,
"assignees": [
],
"milestone": null,
"comments": 0,
"created_at": "2017-02-04T09:56:19Z",
"updated_at": "2017-02-04T10:05:02Z",
"closed_at": "2017-02-04T10:05:02Z",
"body": "\r\n"
}]
}
Kue page: http://localhost:5000/kue

yarn start starting web server on local machine.yarn lint run eslint to check code styleyarn test run testcases with sqliteyarn test:debug run testcase with sqlite and more debug logsyarn test:mysql run testcase with mysqlyarn test:mysql:debug run testcase with mysql and more debug logsyarn db:create create databaseyarn db:drop drop databaseyarn db:migrate run database schema migrationyarn db:rollback rollback last schema migrationyarn db:seed generate seed data into databaseyarn command:job:my run sample jobcap localhost deploy deploy to localhostcap dev deploy deploy to dev servercap staging deploy deploy to staging servercap production deploy deploy to production serverFAQs
A integrated node framework
We found that imhere demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.