
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Tapir is a messaging application meant to be used for synchronizing tasks across machines. It uses Server Sent Events as the message protocol.
Install with npm
npm install -g node-tapir
The client handles two commands (--cmd), send and listen. If you listen
for a topic you will be notified every time a message is sent to your topic.
tapir --cmd listen# Open a connection to the server that listens for `send`s on the topic
# .../roman-numerals-kata, run git pull when a message arrives
tapir --cmd listen 'https://github.com/andersjanmyr/roman-numerals-kata' \
--script 'git pull'
tapir --cmd send# Send a message (ping) to the topic .../roman-numerals-kata
# tapir --cmd defaults to send so there is no need to write --cmd send
tapir 'https://github.com/andersjanmyr/roman-numerals-kata'
tapir --helpUsage: tapir [options] [topic] [message]
--host: The host, default: tapir-server.herokuapp.com
--port: The port, default: 80
--cmd: Command (send or listen), default: send
--help: Prints this message
topic: The topic you are interested int, defaults: topic
message: The message, defaults: ping
If you want to run a server locally you can access with the options --host
and --port.
# Send a ping to a local server
tapir --host localhost --port 3000 my-local-topic
There is a running server at http://tapir-server.herokuapp.com. The client
defaults to this address so if you don't mind your messages being public you
are good to go.
If you want to run a local server, the server is started with npm start and
it starts a server on process.env.PORT or 3000 if PORT is not set.
FAQs
tapir manages the ping-pong workflow across machines.
We found that node-tapir demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.