
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Monoture is a simple blogging application for Node.js. Easy to extend for developers and even easier to use for writers.
$ npm install monoture --save
Monoture ships with an installation script that will set the project up;
$ monoture install
The script will create a few directories, a standard env.js environment file and register an admin user with a randomised password. Users can be added, updated and deleted via the command line (see below).
Monoture can also be started using the command line;
$ monoture run
By default this will start Monoture on http://localhost:3000. The dashboard can be accessed at http://localhost:3000/dashboard/.
monoture runStarts an instance of the Monoture application. Handy if you're not directly accessing the internal API.
monoture installInstalls Monoture onto the parent package by creating folders, default configuration and users.
monoture user-listLists all registered user accounts.
monoture user-add [username] [password]Creates a new user with the provided username and password.
monoture user-delete [username]Deletes a user.
monoture user-pass [username] [password]Updates the specified user with a new password.
Monoture exposes all the content via an external RESTful API. This is protected by a bearer token which can only be obtained after successful login.
Currently only the Post model is presented by the API;
GET /v1/posts
POST /v1/posts
PUT /v1/posts/:post
DELETE /v1/posts/:post
Monoture also provides an internal API that allows developers to implement custom functionality and themes;
setTheme(package)Allows a custom theme to be passed through and bound to the underlying Express.js application.
run()Starts Monoture, similar to running monoture run from the command line.
Monoture uses Pug by default for page layouts and theming. Monoture is configured with multiple view and public directories, which allows templates to be easily extended and overwritten.
Monoture will always check the main package first, and then fallback to the theme directories.
Typically a theme must implement a main home page and a post page. See monoture-theme for reference.


FAQs
Simple blogging on Node.js
We found that monoture demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.