
Security News
Crates.io Users Targeted by Phishing Emails
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
npm-updates
Advanced tools
Emits update events from the npm repository, or any node modules repository.
const NPM = require('npm-updates');
const npm = new NPM();
npm.on('update', (info) => {
console.log('package', info.name, 'was updated to v' + info.version);
});
npm.on('new', (info) => {
console.log('new module!', info.name);
});
Creates a new instance. options
can have
autoStart
- Defaults to true
. Will auto start requesting the registry for updates. If disabled, you can use start()
.uri
- You can set the couchdb registry uri that it checks with this.Starts receiving updates.
Stops requesting updates and emitting events.
Object
Change events from the couchdb _changes
feed.
{ seq: 99230,
id: 'newsemitter',
changes: [ { rev: '5-aca7782ab6beeaef30c36b888f817d2e' } ] }
Object
- Info.First version of module published. info
is equivalent to its package.json
contents.
Object
- Info.Module is updated to a newer version. info
is equivalent to its package.json
contents.
Object
- Info.Emitted for both new
and update
events. info
is equivalent to its package.json
contents.
string
- Name.Module was deleted from the registry.
npm install npm-updates
Tests are written with mocha
npm test
FAQs
Emits update events from the npm repository.
We found that npm-updates demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
Product
Socket now lets you customize pull request alert headers, helping security teams share clear guidance right in PRs to speed reviews and reduce back-and-forth.
Product
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.