Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Record & Playback requests.
yarn add -D jambox
jam
Prepend jam
to whatever command you are using to run next
for example
{
"scripts": {
"dev": "jam next dev"
}
}
Or without changing an existing command
$(yarn bin jam) yarn dev
Each command auto starts a proxy server.
For example
yarn jam http://my-site-url.com
or create a re-usable script if you don't want to type this out every time
{
"scripts": {
"view": "jam http://my-site-url.com"
}
}
jam-server [sub-command] [--port]
Launches a jambox server, you shoulnd't have to start one manually. These are
launched by the jam
command if one isn't already running.
See sub-commands below.
ping
yarn jam-server ping
Attempt to ping a currently running jambox server
shutdown
yarn jam-server shutdown
Attempt to shutdown a currently running jambox server
tail
yarn jam-server tail
Tail the current logfile
Currently jambox.config.js
is the default config path.
Changing the config file resets the jambox server in order to use the changed options. Any cache values not persisted to file(s) are abanadoned when a jam server is reset.
Here is a kitchen sink example of a config that:
http://my-site-url.com
request to localhostwrite: 'auto'
// Example config
module.exports = {
blockNetworkRequests: true,
// A map of a original:destination host
forward: {
// Forward all admin requests to a local App
'http://my-site-url.com': {
target: 'http://localhost:3000',
paths: [
// Match all paths
'**',
// Ignore the following paths, send them to the real server
'!**/graphql',
'!**/log',
],
// Match websockets (support for NextJS local dev)
websocket: true,
// Enable automatic cors support
// Useful for local servers which do not implement OPTIONS handlers
// An object of custom OPTIONS respond Headers could be provided as well
// default: false
cors: true,
},
},
stub: {
'**/*.png': 204,
// It's possible to respond with placeholder images instead of blank/broken 204s
// Note that you must spcify a filepath, not file contents
'**/*.jpg': { status: 200, file: 'placeholder.jpg', preferNetwork: true },
'**/*.ico': 204,
'**/log': { status: 200, statusMessage: 'stub log' },
},
cache: {
write: 'auto',
// Match a hostname + pathname string
stage: ['**/graphql'],
ignore: ['**/log'],
},
};
FAQs
Tool for recording and playing back HTTP requests.
We found that jambox demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.