
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A lightweight Node.js module to fetch, parse web content, extract meta tags, and capture webpage screenshots efficiently.
A highly efficient, lightweight Node.js module designed for robust web scraping, HTML parsing, asset extraction, and automated webpage screenshot capturing.
Unlike heavy headless browser solutions, Nexara is built on top of Axios and Cheerio, ensuring maximum performance, low memory footprint, and blisteringly fast execution.
Install the package via npm:
npm install nexara
Fetch raw HTML and parse it instantly using the built-in Cheerio wrapper.
const nexara = require('nexara');
async function scrapeTitle() {
try {
// Fetch and parse in one go
const $ = await nexara.fetchHtml('https://example.com');
console.log('Page Title:', $('title').text());
} catch (error) {
console.error('Scraping Error:', error);
}
}
scrapeTitle();
Easily scrape all href and src attributes from a target URL.
const nexara = require('nexara');
async function getAssets() {
const assets = await nexara.extractAssets('https://example.com');
console.log(`Found ${assets.links.length} Links`);
console.log(`Found ${assets.images.length} Images`);
}
getAssets();
Download files directly to your local storage securely and efficiently.
const nexara = require('nexara');
async function download() {
const result = await nexara.downloadFile(
'https://8upload.com/preview/1e6e38bf72022226/nexara-test.jpg',
'./downloaded-image.png'
);
console.log(result); // "File successfully downloaded to ./downloaded-image.png"
}
download();
Perfect for building link previews or SEO analysis tools.
const nexara = require('nexara');
async function getSeoData() {
const meta = await nexara.getMeta('https://github.com/nimesh-piyumal');
console.log('Title:', meta.title);
console.log('Description:', meta.description);
}
getSeoData();
Capture remote webpage screenshots instantly via a lightweight, built-in engine.
const nexara = require('nexara');
const fs = require('fs');
async function takeScreenshot() {
const screenshotBuffer = await nexara.ssweb('https://github.com');
fs.writeFileSync('screenshot.png', screenshotBuffer);
console.log('Screenshot saved as screenshot.png');
}
takeScreenshot();
Make robust requests with automatic retries and custom Axios configurations.
const nexara = require('nexara');
async function robustRequest() {
const options = {
timeout: 5000,
// Add proxy or custom headers here
};
// Will retry up to 3 times if the request fails
const response = await nexara.get('https://example.com', options, 3);
console.log('Status Code:', response.status);
}
robustRequest();
| Method | Description | Returns |
|---|---|---|
get(url, [options], [retries]) | Makes an HTTP GET request with auto-retry logic. | Promise<Object> |
fetchHtml(url) | Fetches a URL and returns a Cheerio instance. | Promise<Object> |
load(htmlString) | Parses raw HTML string using Cheerio. | Object (Cheerio) |
extractAssets(url) | Returns an object containing unique arrays of links and images. | Promise<Object> |
getMeta(url) | Extracts Title, Description, Image, and Keywords. | Promise<Object> |
downloadFile(url, dest) | Downloads a file efficiently to a specified path. | Promise<String> |
ssweb(url) | Captures a 1200px wide screenshot of the target URL. | Promise<Buffer> |
Created and maintained by Nimesh Piyumal.
This project is licensed under the ISC License. Feel free to contribute or report issues on GitHub!
FAQs
A lightweight Node.js module to fetch, parse web content, extract meta tags, and capture webpage screenshots efficiently.
The npm package nexara receives a total of 38 weekly downloads. As such, nexara popularity was classified as not popular.
We found that nexara demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.