Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
A Pino transport that automatically rolls your log files.
npm i pino-roll
import { join } from 'path'
import pino from 'pino'
const transport = pino.transport({
target: 'pino-roll',
options: { file: join('logs', 'log'), frequency: 'daily', mkdir: true }
})
const logger = pino(transport)
(Also works in CommonJS)
Creates a Pino transport (a Sonic-boom stream) to writing into files. Automatically rolls your files based on a given frequency, size, or both.
You can specify any of Sonic-Boom options except dest
file
: absolute or relative path to the log file.
Your application needs the write right on the parent folder.
Number will be appened to this file name.
When the parent folder already contains numbered files, numbering will continue based on the highest number.
If this path does not exist, the logger with throw an error unless you set mkdir
to true
.
file
may also be a function that returns a string.
size?
: the maximum size of a given log file.
Can be combined with frequency.
Use k
, m
and g
to express values in KB, MB or GB.
Numerical values will be considered as MB.
frequency?
: the amount of time a given log file is used.
Can be combined with size.
Use daily
or hourly
to rotate file every day (or every hour).
Existing file within the current day (or hour) will be re-used.
Numerical values will be considered as a number of milliseconds.
Using a numerical value will always create a new file upon startup.
extension?
: appends the provided string after the file number.
symlink?
: creates a symlink to the current log file.
The symlink will be updated to the latest log file upon rotation.
The name of the symlink is always called current.log
.
limit?
: strategy used to remove oldest files when rotating them:
limit.count?
: number of log files, in addition to the currently used file.
dateFormat?
: the format for appending the current date/time to the file name.
When specified, appends the date/time in the provided format to the log file name.
Supports date formats from date-fns
(see: date-fns format documentation).
For example:
Daily: 'yyyy-MM-dd'
→ error.2024-09-24.log
Hourly: 'yyyy-MM-dd-hh'
→ error.2024-09-24-05.log
Please not that limit
only considers created log files. It will not consider any pre-existing files.
Therefore, starting your logger with a limit will never tries deleting older log files, created during previous executions.
MIT
FAQs
A Pino transport that automatically rolls your log files
We found that pino-roll demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.