Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Iora is a boilerplate stuffed into a CLI tool that makes it a breeze to create modular servers through Express.
You can route requests to JavaScript files and add middleware that's either npm or locally hosted via iora.json
Check out iora-static middleware if you're interested in making a portion of your server a static file-serve.
You can install iora via npm:
npm install -g iora
(May require sudo
)
iora <command> [directory] [options...]
Run iora help
for a list of commands and their usage.
Iora is documented here on GitHub through the Wiki pages, you can find a lot of information from the community there. But, you can also find official documentation at www.iorajs.org/docs/
See the CONTRIBUTING.md file for more information on contributing guidelines. It contains information about creating issues, contributing through forks and pull requests, and how your contributions are licensed. (Pretty important stuff!!)
Iora and any contributions made towards iora are licensed under MIT.
See the LICENSE file for more information about MIT and how this product is licensed.
FAQs
Make your servers modular and easier to manage with iora.
The npm package iora receives a total of 0 weekly downloads. As such, iora popularity was classified as not popular.
We found that iora demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.