
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Inline C++ with Node.js
Works on:
Linux,
Windows,
MacOS
Purpose:
node-addon-api.node-gyp.npm install --save inline-cpp
or install it globally (it works with Node.js REPL):
npm install -g inline-cpp
// test.js
const compile = require('inline-cpp');
const hello = compile `
String func(const CallbackInfo& info) {
return String::New(info.Env(), "Hello world from C++!");
}
`
console.log(hello())
Now run it:
➜ node test.js
Hello world from C++!
The first time you run the script, it takes longer to execute. For each inline block of code, a native module will be generated, compiled with node-gyp and loaded dynamically. If the module Init function is not defined, it is generated as well.
The next time you run the script, it will reuse previously generated module, so it will run instantly (unless you change the inline C++ code).
For more C++ code examples, see node-addon-api
For more inline-cpp API examples, see examples on github
inline-cpp supports several invocation methods.
Pass some code as string to build it with default options.
const InlineCPP = require('inline-cpp');
InlineCPP('code')
You can also pass code using tagged template syntax.
InlineCPP `code`
Pass an object to create a new compiler with custom options.
Options will get passed to node-gyp target.
const customCompiler = InlineCPP({ ... })
If the code block only contains a single function, the compiler returns the function.
If it contains multiple functions or custom Init, the module itself is returned.
This is just a prototype. I created this to check the general concept.
You're welcome to contribute! Here are some ideas:
node node-gyp.jsYou can enable debug output by setting env. variable: DEBUG=inline-cpp
FAQs
Use inline C++ in your JS
The npm package inline-cpp receives a total of 3 weekly downloads. As such, inline-cpp popularity was classified as not popular.
We found that inline-cpp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.