
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
a nodeJS 0.10 compatible REPL server/client. simple, but includes autoComplete and colors, and local scope access for clients.
nREPL is a very simple nodejs REPL client+server combination library.
Since nodeJS versions starting with 0.10 the new streams API kills the official REPL demo code as well as some of the REPL helper repositories out there.
The exit code is something like this:
Error: Cannot switch to old mode now.
at emitDataEvents (_stream_readable.js:683:11)
at Socket.Readable.pause (_stream_readable.js:674:3)
at Connection.pause (c:\program files\nodejs\node_modules\mysql\lib\Connect.....
As we were using our own code which stopped working as well we wrote a fix when migrating to 0.10+ . Hence, this repo works with node 0.10+ - whether it works below I am not sure - but other repl REPOS do, so all versions should be covered ;)
enjoy.
// globally, which will allow you to create REPL servers and clients from command line using nrepl ... (see below)
npm install -g nrepl
// connecting to a REPL server:
nrepl <port|host port>
// starting a local REPL server:
nrepl serve <port>
// starting a repl server
var nrepl = require('nrepl');
nrepl.nReplServer('serverId', port);
FAQs
a nodeJS 0.10 compatible REPL server/client. simple, but includes autoComplete and colors, and local scope access for clients.
We found that nrepl demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.