Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Simple dev server with Markdown support, CLI, and API.
$ cd /path/to/your/project
$ luvi
♡ luvi listening on 4444
By default, luvi
acts as a static server, serving the files in cwd
.
open
defaults to false.htm
and .xhtml
support.lv
shorthand. Use a shell alias.lv
shorthand. This will still work until it's removed in
3.0.0. Please update any scripts using lv
to use luvi
.luvi
no longer has a proxying utility.src/util
is now src/lib
.src/
is now project root (src/lib
is now /lib
)package.json
is fixed so luvi
works as a module again. Sorry about that!npm rm -g luvi
and then npm i -g luvi
to upgrade!$ npm i -g luvi
$ luvi [options]
If you'd rather not install globally, you can use npx
:
npx luvi [options]
.
♡ luvi (a server)
------------------
usage:
♡ luvi # launch server with default config
♡ luvi -p 1337 # listen on specified port
♡ luvi -r /path # serve from specified dir
♡ luvi -o # open the browser after start
♡ luvi -v # luvi version
♡ luvi -h # this help
--------------------
see the readme for flags and api
You can pass an object to luvi()
for custom settings; otherwise, these
defaults are applied:
const luvi = require('luvi')
const l = luvi({
name: 'luvi',
root: process.cwd(),
port: 4444
})
// returns an http.server, so you can call l.close() when you're done with it
This is exactly the same as just calling luvi()
, with no config object.
These defaults are merged with whatever you pass, so if, for example, you only
pass in a custom server name, luvi
will still run on port 4444 and use cwd
as the root to serve.
Multiple servers can be launched from the same script, with different configs,
by calling luvi()
again with different options.
string
(default: process.cwd()
)
index.html
. Can be absolute or relative.root: '/path/to/document/root'
number
(default: 4444
)
port: 3000
bool
(default: false
)
open: true
Please do, if you'd like! Any issue reports/fixes are welcome. I am not considering adding any features.
FAQs
Simple dev server with Markdown support, CLI, and API.
The npm package luvi receives a total of 48 weekly downloads. As such, luvi popularity was classified as not popular.
We found that luvi demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.