Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Nodemon is a utility that monitors for any changes in your source code and automatically restarts your server. It is mainly used during the development of Node.js applications to increase productivity by reducing the need to manually restart the server after making code changes.
Automatic Restart
Automatically restarts the node application when file changes in the directory are detected. To use nodemon, replace the word 'node' on the command line when executing your script.
nodemon app.js
Custom Watch List
Tells nodemon to only restart if there are changes in the 'app' or 'libs' directories. You can specify multiple directories to watch.
nodemon --watch app --watch libs app/server.js
Delay Restart
Delays the restart upon changes for a specified amount of time (in seconds). This can be useful if you're waiting for a compilation of files to complete before restarting.
nodemon --delay 10 app/server.js
Script Configuration
Allows you to configure nodemon as a script in your package.json file, enabling you to start your application with 'npm start'.
{\n \"scripts\": {\n \"start\": \"nodemon app.js\"\n }\n}
Ignore Specific Files
Prevents nodemon from restarting when changes are made to specific files. Useful when you don't want to trigger a restart for changes in non-relevant files.
nodemon --ignore 'app/ignore.js'
PM2 is a production process manager for Node.js applications with a built-in load balancer. It differs from nodemon in that it's designed for production use, offering features like clustering, daemonizing, and log management.
Forever is a simple CLI tool for ensuring that a given script runs continuously (i.e., forever). It's more similar to pm2 and is often used in production environments, unlike nodemon which is typically used in development.
Supervisor is a nodemon-like tool that restarts programs when file changes in the directory are detected. It is less feature-rich than nodemon and is primarily used for running and debugging during development.
Node-dev is another development tool that automatically restarts your node application when files are modified. It is similar to nodemon but with fewer configuration options.
For use during development of a node.js based application.
nodemon will watch the files in the directory that nodemon was started, and if they change, it will automatically restart your node application.
nodemon does not require any changes to your code or method of development. nodemon simply wraps your node application and keeps an eye on any files that have changed. Remember that nodemon is a replacement wrapper for node
, think of it as replacing the word "node" on the command line when you run your script.
Either through forking or by using npm (the recommended way):
npm install nodemon -g
And nodemon will be installed in to your bin path. Note that as of npm v1, you must explicitly tell npm to install globally as nodemon is a command line utility.
nodemon wraps your application, so you can pass all the arguments you would normally pass to your app:
nodemon [your node app]
For example, if my application accepted a host and port as the arguments, I would start it as so:
nodemon ./server.js localhost 8080
Any output from this script is prefixed with [nodemon]
, otherwise all output from your application, errors included, will be echoed out as expected.
nodemon also supports running and monitoring coffee-script apps:
nodemon server.coffee
If no script is given, nodemon will test for a package.json
file and if found, will run the file associated with the main property (ref).
You can also pass the debug flag to node through the command line as you would normally:
nodemon --debug ./server.js 80
If you have a package.json
file for your app, you can omit the main script entirely and nodemon will read the package.json
for the main
property and use that value as the app.
nodemon was original written to restart hanging processes such as web servers, but now supports apps that cleanly exit. If your script exits cleanly, nodemon will continue to monitor the directory (or directories) and restart the script if there are any changes.
nodemon can also be used to execute and monitor other programs. nodemon will read the file extension of the script being run and monitor that extension instead of .js if there's no .nodemonignore:
nodemon --exec "python -v" ./app.py
Now nodemon will run app.py
with python in verbose mode (note that if you're not passing args to the exec program, you don't need the quotes), and look for new or modified files with the .py
extension.
By default nodemon monitors the current working directory. If you want to take control of that option, use the --watch
option to add specific paths:
nodemon --watch app --watch libs app/server.js
Now nodemon will only restart if there are changes in the ./app
or ./libs
directory. By default nodemon will traverse sub-directories, so there's no need in explicitly including sub-directories.
In some situations, you may want to wait until a number of files have changed. The timeout before checking for new file changes is 1 second. If you're uploading a number of files and it's taking some number of seconds, this could cause your app to restart multiple time unnecessarily.
To add an extra throttle, or delay restarting, use the --delay
command:
nodemon --delay 10 server.js
The delay figure is number of seconds to delay before restarting. So nodemon will only restart your app the given number of seconds after the last file change.
By default, if nodemon will only restart when a .js
JavaScript file changes. In some cases you will want to ignore some specific files, directories or file patterns, to prevent nodemon from prematurely restarting your application.
You can use the example ignore file (note that this example file is not hidden - you must rename it to .nodemonignore
) as a basis for your nodemon, but it's very simple to create your own:
# this is my ignore file with a nice comment at the top
/vendor/* # ignore all external submodules
/public/* # static files
./README.md # a specific file
*.css # ignore any CSS files too
The ignore file accepts:
#
symbolnodemon sends a kill signal to your application when it sees a file update. If you need to clean up on shutdown inside your script you can capture the kill signal and handle it yourself.
The following example will listen once for the SIGUSR2
signal (used by nodemon to restart), run the clean up process and then kill itself for nodemon to continue control:
process.once('SIGUSR2', function () {
gracefulShutdown(function () {
process.kill(process.pid, 'SIGUSR2');
})
});
Note that the process.kill
is only called once your shutdown jobs are complete. Hat tip to Benjie Gillam for writing technique this up.
If you're using nodemon with forever (perhaps in a production environment) you can combine the two together. This way if the script crashes, forever restarts the script, and if there are file changes, nodemon restarts your script. For more detail, see issue 30.
To acheive this you need to include the --exitcrash
flag to ensure nodemon exits if the script crashes (or exits unexpectedly):
forever nodemon --exitcrash server.js
To test this, you can kill the server.js process and forever will restart it. If you touch server.js
nodemon will restart it.
Note that I would not recommend using nodemon in a production environment - but that's because I wouldn't want it restart without my explicit instruction.
FAQs
Simple monitor script for use during development of a Node.js app.
The npm package nodemon receives a total of 2,716,608 weekly downloads. As such, nodemon popularity was classified as popular.
We found that nodemon demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.