Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
lightningcomm
Advanced tools
Project Iteration of Spypress - A Server Visualizer
npm i lightningcomm
Within your server.js
, import the Lightningcomm library
const lightningcomm = require("lightningcomm");
Requires the Express module just as you require other modules and and puts it in a variable.
const app = express();
Invoke your function lightningcomm
. It takes your express
module as an argument.
const lc = lightningcomm(app);
Lightningcomm is an iteration of the SpyPress project, a lightweight, open source tool designed to help developers visualize requests from the client.
There’s a strange satisfaction when you first create a box or button and have it appear on the front end of your application. Maybe you create a button with an event listener, sure you can go to the front end of your application to test the functionality of your button BUT what does this action look like in the back-end?
How do you VISUALIZE all outgoing requests and incoming responses with dynamic bits of data flowing in and out of your database all in a simple page?
It might be difficult to imagine a piece of data flowing in and out of your code base, but we can utilize the front-end to display any information we send. As Lightningcomm is a library built upon SpyPress framework, imagine a piece of data being represented as an important person (ie: the President of a country). We want to send a spy to constantly keep a watch on this person and report back on all of this person’s moves. This spy is named SpyPress.
Lightningcomm is a tool that can be run alongside any project to spy on requests and responses coming to and from the server. Using Lightningcomm is as easy as installing the npm package and requiring the the library to be used in your server file. Lightningcomm comes with a set of methods that allow the user to "listen" to the communications made with/by the server on the backend. Once incorporated into your project, all you need to do is run your server in development mode. Lightningcomm will open up it’s own server on a localhost port to display all requests and responses via the front end in the browser
Lightningcomm is meant for developers working with lightweight server-side frameworks. Developers can utilize Lightningcomm to visualize the servers they are creating and managing allowing them to optimize their servers through constant, real time monitoring of data passed from the client to server to database and back!
At present, visualization is limited to client requests.
As Lightningcomm requires continuous data exchange, this project is made possible with the WebSocket
protocol which provides a way to exchange data between browser and server via a persistent connection. The data can be passed in both directions as “packets”, without breaking the connection and additional HTTP-requests.
FAQs
Server Visualizer
The npm package lightningcomm receives a total of 2 weekly downloads. As such, lightningcomm popularity was classified as not popular.
We found that lightningcomm demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.