
Security News
Node.js Drops Bug Bounty Rewards After Funding Dries Up
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.
iowamp is a WAMP™ server in NodeJS. Currently it only supports basic RPC calls, but pub/sub support is coming. It attaches to WebSocket.IO.
WebSocket Application Messaging Protocol (WAMP) is a protocol for RPC & PubSub support, based on WebSockets. Technically, WAMP is an officially registered WebSocket subprotocol proposed by Tavendo.
Apache License (version 2)
iowamp itselfs requires version 0.6.x of NodeJS or higher. If you want to run the tests, you'll want Vows. To really use iowamp, you will also need WebSocket.IO.
npm install iowamp
Before you can start using iowamp in your project, you need to attach it to an websocket.io instance of your choice:
var iowamp = require('./lib'),
wsio = require('websocket.io');
var server = wsio.listen(8000);
var app = iowamp.attach(server);
Registering a RPC class with some methods is also easy - here is an example for it:
var iowamp = require('./lib'),
wsio = require('websocket.io');
var server = wsio.listen(8000);
var app = iowamp.attach(server);
app.rpc('http://example.com/calc#', function() {
this.register('add', function(cb, a, b) {
cb(null, a + b);
});
});
The code should be kinda self-explanatory, allthough here is some additional information:
app.rpc(baseURI, constructor) registers a new RPC class
this.register(name, method)
cb(error, result) Kinda self-explanatory. If an error will be passed, a generic error will be send back to the WAMP client. If not, the result will be send back.
If you want to catch methods which are unknown / not declared, you can listen for the unknownCall event:
app.on('unknownCall', function(baseURI, method, callback, args...) {
// Your code goes here
});
iowamp NodeJS WAMP™ server - © 2012-2013 P. Mathis (dev@snapserv.net)
FAQs
WAMP™ server in NodeJS
We found that iowamp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.