
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A JavaScript latency analyzer like updown.io or ping.apex.sh. Get information about DNS lookup, connection time to your HTTP(S) server and how long it takes to receive the response.
$ > npm install latenz -g
$ > latenz sbstjn.com
host: sbstjn.com
Name Lookup: 10ms
Connection: 3ms (13ms)
Response: 63ms (76ms)
Received: 5ms (81ms)
total: 81ms

If you plan to use the result for further scripting, you might be a friend of the raw mode, which can be enabled by using --raw parameter:
$ > latenz sbstjn.com --raw
985 lookup:443 socket:3 response:534 end:5
For using HTTPS instead of HTTP (default), just pass the --secure parameter to latenz:
$ > latenz sbstjn.com --raw --secure
985 lookup:443 socket:3 response:534 end:5
If you need the result as a JSON inside JavaScript:
const Latenz = require('latenz');
const l = new Latenz();
l.measure('sbstjn.com').then(result => {
console.log(result);
/*
[
{ key: 'resolve', time: 139 },
{ key: 'socket', time: 2 },
{ key: 'response', time: 286 },
{ key: 'firstdata', time: 1 },
{ key: 'end', time: 2 }
]
*/
}).catch((e) => {
throw e;
});
You can pass an options object to measure in order to enable a secure connection, change the used port or set the result mode:
l.measure('sbstjn.com',
{
secure: true,
port: 8443,
mode: 'pretty'
}
);
FAQs
Measure response latency when requesting a web host.
The npm package latenz receives a total of 1 weekly downloads. As such, latenz popularity was classified as not popular.
We found that latenz demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.