Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A simple nodejs reporting server that leverages NReports.
Currently there is no GUI for creating or running reports, only GUI component is the viewer. It servers more as an API server.
var NRunner = require('nrunner');
NRunner.Server.start();
var NRunner = require('nrunner');
NRunner.WorkerService.start();
Use this method when you don't need to pass the data source data inline with the request.
http://server/runner/report_id¶m1=value1¶m2=value2&expires=days&runmode=(inline|background)
The report runner will load the report engine and pass in the parameters defined.
inline mode - the report will be executed and pushed into reporting cache, the user will be immediatly redirected to the report viewier will the generated report instance token.
background mode - the report will be executed as a background task, the user will immedatly receive a JSON response containing the original request details, a report instance token, the url to view the report and a url to the cached report directly.
javascript { report: sampleReport123, output: html, expires: 1, id: jlahdsdkas78a7dsdhajshd2 url: http://localhost/viewier/jlahdsdkas78a7dsdhajshd2 cached: https://nrunner.s3.amazonaws.com/reports/cache/2014-03/jlahdsdkas78a7dsdhajshd2.html parameters: [ { name : "param1", value: "value1"}, { name : "param2", value: "value2"} ] }
Use this method when you need to pass the data source data inline with the request.
Report runner advanced works the same as the standard runner only you pass the parameters in the body of a post and can supply your datasource data inline.
http://server/runner/report_id¶m1=value1¶m2=value2&expires=days&runmode=(inline|background)
The report runner will load the report engine and pass in the parameters defined.
Post Body
JSON response containing the original request details, a report instance token, the url to view the report and a url to the cached report directly.
#####[Sample Response]
javascript { report: "sampleReport123", output: "html", expires: 1, token: "jlahdsdkas78a7dsdhajshd2" url: "http://localhost/viewier/jlahdsdkas78a7dsdhajshd2" cached: "https://nrunner.s3.amazonaws.com/reports/cache/2014-03/jlahdsdkas78a7dsdhajshd2.html" parameters: [ { name : "param1", value: "value1"}, { name : "param2", value: "value2"} ] }
####[Sample Post Body]
javascript { report: "sampleReport123", output: "html", expires: 1, runmode: "inline", parameters: [ { name : "param1", value: "value1"}, { name : "param2", value: "value2"} ], data: {} // JSON object }
+ Call the viewer url with the token received from the reporting request. This behavior happens automatically via a server side redirect when you call the runner with a runmode = "inline".
+ http://server/viewer/token
FAQs
Lightweight web container for NReports
The npm package nrunner receives a total of 3 weekly downloads. As such, nrunner popularity was classified as not popular.
We found that nrunner demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.