
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
passenger-seat
Advanced tools
Helper for setting application environment within Phusion Passenger for Apache
Helper for setting application environment within Phusion Passenger for Apache
A convience module for when your Dev & Prod machines differ in that one uses Phusion Passenger for Apache to deploy Node apps, and you don't want to change configurations.
Because shut up.
No idea, as these are both untested, and I have only ever used it with Phusion Passenger for Apache. However, I would suspect that it would work with Nginx as well, and not be needed at all for Phusion Passenger Standalone, since it will only run a single app at any given time.
Just include & call it:
var port = require('./passenger-seat')();
This will configure the PhusionPassenger object (if exists) and return the string of "passenger" to be used when you pass a port to your app.
If the PhusionPassenger object does not exist, it will first try to return the value of process.env.PORT (if set), otherwise it will use the default - which is '1337'.
To set your own default port number, you can simply pass it into the call like so:
// set default port to 3000
var port = require('./passenger-seat')(3000);
In any case, once you have your port defined, you just pass it to your app
var server = http.createServer(onRequest).listen(port);
It is strongly recommended that passenger-seat is called as early as possible, as noted in the Phusion Passenger user group
FAQs
Helper for setting application environment within Phusion Passenger for Apache
The npm package passenger-seat receives a total of 6 weekly downloads. As such, passenger-seat popularity was classified as not popular.
We found that passenger-seat demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.