Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
jaws-framework
Advanced tools
Check us out at . Our presentation is "DVO209 - JAWS: The Monstrously Scalable Serverless Framework – AWS Lambda, Amazon API Gateway, and More!"
Status 9/18: The JAWS V1 RC1 in now available. Significant re-write. Few of the many new features: deploy lambdas via CloudFormation. AWSM: Amazon Web Services Modules. Much improved multi-region support. Totally re-done env
command.
Don't forget to join the JAWS Email List for updates!
nodejs
only, we plan on adding support for all languages. This means each lambda in your JAWS project can be coded in the lang that best suites the problem.Graphics coming soon...
The guide below gets you started quickly. Later, check out the best practices guide in our wiki for tips on security and more.
$ npm install jaws-framework -g
$ jaws new project
Note: we recommend camelCase for project names. Why?
$ cd <new-project-name>
$ jaws new action users create
$ jaws dash
This will create a new jaws project, create a lambda function and endpoint (and install jaws-core-js awsm), which you can immediately deploy via
jaws dash
. After deployment is complete, you will be given a url. In the above example, you can access your
deployed lambda at your_url/users/create
.
We're currently working on our docs, wiki, best practices and FAQ pages.
Once you become familiar with JAWS, you can read about JAWS AWSM: Amazon Web Services Modules to start contributing awsm's to the community.
Please check out the JAWS V1 Google Document and our CONTRIBUTING.md for coding and PR guidelines.
FAQs
JAWS is the serverless framework powered by Amazon Web Services.
The npm package jaws-framework receives a total of 3 weekly downloads. As such, jaws-framework popularity was classified as not popular.
We found that jaws-framework demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.