
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
Run .mjs files from your command line, with all the tweaks from esmod-pmb.
Added features:
-r if they would otherwise
yield the ERR_MODULE_RESOLUTION_LEGACY error.NODEMJS_PRELOAD and
npm setting nodemjs-preload (see caveats below).
Multiple module specs can be separated with spaces.
They will be loaded even before the -r pre-imports.… because the upstream esm module is no longer maintained.
See issue #2.
No.
$ nodemjs test/uc1st.mjs
uc1st: [ 'Using dummy input', 'Because there were', 'No CLI args' ]
$ ./test/uc1st.mjs foo bar qux
uc1st: [ 'Foo', 'Bar', 'Qux' ]
npm install --global nodemjsnodejs command. If you use sane package sources, you probably do.
If you don't, just make a symlink nodejs to node or whatever
it's called on your system.
node
command name, file an issue, ideally after you've renamed the
Node.js foundation to Node foundation.)
nodejs replacement
via the NODEJS_CMD env var.Currently no support for setting process.mainModule, see the
upstream bug ticket.
npm config caveat:
The nodemjs-preload npm setting
is currently ignored if its value as a string is literally undefined.
If you want to pre-load a module with that name and nothing else,
put it in twice, with a space between.
See also: Duplicate pre-imports.
Duplicate pre-imports:
nodemjs currently does not check whether a module you're trying to
pre-import had already been imported before.
Usually node's module cache voids all non-first import attempts
per module, so this won't matter
— unless you use cache-busting modules, in which case you're on your own.
REPL:
The REPL isn't upgraded to ESM because esm currently
cannot expose its REPL in a clean and easy way.
The invokedAs context property for nodemjsCliMain doesn't work.
Needs more/better tests and docs.
ISC
FAQs
Run .mjs files from your command line, with all the tweaks from esmod-pmb.
The npm package nodemjs receives a total of 20 weekly downloads. As such, nodemjs popularity was classified as not popular.
We found that nodemjs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.