Security News
Weekly Downloads Now Available in npm Package Search Results
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
NodeBB Forum Software is powered by Node.js and built on either a Redis or MongoDB database. It utilizes web sockets for instant interactions and real-time notifications. NodeBB has many modern features out of the box such as social network integration and streaming discussions, while still making sure to be compatible with older browsers.
Additional functionality is enabled through the use of third-party plugins.
NodeBB requires the following software to be installed:
Please refer to platform-specific installation documentation
It is important to ensure that your NodeBB and database servers are secured. Bear these points in mind:
bind_address
to 127.0.0.1
so as to restrict access to the local machine onlyrequirepass
to secure Redis behind a password (preferably a long one)iptables
to secure your server from unintended open ports. In Ubuntu, ufw
provides a friendlier interface to working with iptables
.
Detailed upgrade instructions are listed in Upgrading NodeBB
NodeBB is licensed under the GNU General Public License v3 (GPL-3) (http://www.gnu.org/copyleft/gpl.html).
Interested in a sublicense agreement for use of NodeBB in a non-free/restrictive environment? Contact us at sales@nodebb.org.
FAQs
NodeBB Forum
The npm package nodebb receives a total of 237 weekly downloads. As such, nodebb popularity was classified as not popular.
We found that nodebb demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
Security News
A Stanford study reveals 9.5% of engineers contribute almost nothing, costing tech $90B annually, with remote work fueling the rise of "ghost engineers."
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.