
Research
Node.js Fixes AsyncLocalStorage Crash Bug That Could Take Down Production Servers
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.
Add express style params support to koa-route.
var koa = require('koa');
var route = require('koa-route')
var paramify = require('koa-params');
route = paramify(route);
var param = route.param;
var get = route.get;
var app = koa();
// fake db
var users = {
'julian': { name: 'Julian Gruber', fun: true },
'badguy': { name: 'Bad Guy', fun: false }
};
param('user', function*(id, next){
var user = users[id];
if (!user) return this.status = 404;
this.user = user;
yield next;
});
app.use(get('/', function*(){
this.body = Object.keys(users);
}));
app.use(get('/:user', function*(){
this.body = this.user;
}));
app.listen(3000);
$ npm install koa-params
Return a cloned version of route with http verbs patched and added .param.
When a route contains :param, call fn with its value and next. Wait for it to yield before continuing with the real route handler - unless you don't yield and the response ends.
You can register multiple fns per param, just as with express.
fn can be koa middleware too, when fn only takes one argument, next will be supplied.
MIT
FAQs
Add express style params support to koa
The npm package koa-params receives a total of 4 weekly downloads. As such, koa-params popularity was classified as not popular.
We found that koa-params demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.