
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
light-core
Advanced tools
async
bull - MQ
casbin - 权限控制
cron - 定时处理
csv
ejs - Template engine
helmet - 安全校验
ignore - 处理 .gitignore 文件
js-yaml - 解析yaml
jwt-simple - jwt编码解码
koa - KOA web框架
koa-body - body解析
koa-csrf - csrf校验
koa-helmet - 安全检查
koa-send - 静态文件处理
koa-session - session实现
lodash
mime-types - MimeType解析
dayjs - 日期处理
mongodb
morgan - 记录操作日志
mysql
numeral - 数据格式化
pluralize - 复数化
qr-image - 二维码支持
qs - query string
range-parser - 解析request的header中的range值
raw-body - 解析request的raw值
validator - 校验
ws - websocket
xlsx - excel处理
xml2js - xml解析
zip-stream - 处理zip文件
FAQs
LightCore
The npm package light-core receives a total of 118 weekly downloads. As such, light-core popularity was classified as not popular.
We found that light-core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.