
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Get random names from Lord of the Rings characters.

This package is distributed via npm:
npm install lor-names
var names = require('lor-names');
var allNames = names.all;
var randomName = names.random();
var threeRandomNames = names.random(3);
This library was developed by me as part of an egghead.io series called "How to Write a JavaScript Library."
I'm now also using it to give a workshop for Frontend Masters.
This project assumes you have NodeJS v6 or greater installed. You should also have npm v3 or greater installed as well (this comes packaged with Node 6). You'll also need a recent version of git installed as well.
You may have come to this project from different varying sources. There are a different series of branches for each workshop/course I've done. To get started with the project, start with this:
git fetch --allIf you need help with these steps, you might check out this free Egghead.io course which can help you get things going.
Finally, based on which version of the project you're looking for (workshop, egghead, or Frontend Masters) you'll run one of the following commands in the cloned directory:
npm run setup:femnpm run setup:eggheadIf you get any failures at this point something is wrong and needs to be fixed. Remember, Google and StackOverflow are your friends.
You might find it helpful to see a list of the available branches. Run: git branch for that.
FAQs
Get random Lord of the Rings names
We found that lotr-names demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.