
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
nodejs-libcurl
Advanced tools
[](https://gitter.im/JCMais/node-libcurl?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge)
Libcurl bindings for Node.js. Based on the work from jiangmiao/node-curl.
npm install node-libcurl --save
var Curl = require( 'node-libcurl' ).Curl;
var curl = new Curl();
curl.setOpt( 'URL', 'www.google.com' );
curl.setOpt( 'FOLLOWLOCATION', true );
curl.on( 'end', function( statusCode, body, headers ) {
console.info( statusCode );
console.info( '---' );
console.info( body.length );
console.info( '---' );
console.info( this.getInfo( 'TOTAL_TIME' ) );
this.close();
});
curl.on( 'error', curl.close.bind( curl ) );
curl.perform();
var Curl = require( 'node-libcurl' ).Curl;
var curl = new Curl(),
close = curl.close.bind( curl );
curl.setOpt( curl.option.URL, '127.0.0.1/upload.php' );
curl.setOpt( curl.option.HTTPPOST, [
{ name: 'input-name', file: '/file/path', type: 'text/html' },
{ name: 'input-name2', contents: 'field-contents' }
]);
curl.on( 'end', close );
curl.on( 'error', close );
For more examples check the examples folder.
Check the API Docs
This package has prebuilt binaries (thanks to node-pre-gyp) available for the following platforms:
Just running npm install nodejs-libcurl should install a prebuilt binary and no compilation will be needed.
If there is no prebuilt binary available that matches your system, or if the installation fails, then you will need an environment capable of compilling nodejs addons, which means python 2.7 installed and an updated C++ compiler able to compile C++11.
If you don't want to use a prebuilt binary you can pass --build-from-source to the arguments list.
The only compiler supported on linux is gcc >=4.8, also you need to have the libcurl development files available,
if you are running debian for example, you must install the libcurl4-openssl-dev package.
If you don't want to use the libcurl version shipped with your system, since it's probably very old
(debian 7 uses libcurl 7.26 which is more than 3 years old, and had more than 1000 bugfixes already),
you can install libcurl from source, the addon will pick the libcurl info using the curl-config tool,
that way you only need to make sure that the libcurl you installed is in the path and in higher priority
than the system one.
You need to have installed OS X >=10.8 and xcode >=4.5
If you want to install using a different version of libcurl, the same instructions for linux applies.
If installing using a prebuilt binary you only need to have the visual c++ 2013 runtime library. If building from source, you need to have Python 2.7, Visual Studio >=2013 and git
Currently there is no support to use other libcurl version than the one provided by the curl-for-windows submodule.
Currently there are no prebuilt binaries for node-webkit, to install node-libcurl, do the following:
npm install nw-gyp -g
npm install node-libcurl --runtime=node-webkit --target=0.12.3 --arch=x64 --msvs_version=2013 --build-from-source --save
--target says you want to build for the node-webkit version 0.12.3.
--arch says the module should be built for 64bit.
Currently there are no prebuilt binaries for electron, to install node-libcurl, do the following:
npm install node-libcurl --runtime=electron --target=0.34.1 --arch=x64 --build-from-source --save
--target says you want to build for the electron version 0.34.1.
--arch says the module should be built for 64bit.
FAQs
[](https://gitter.im/JCMais/node-libcurl?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge)
We found that nodejs-libcurl demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.