
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
pino-stackdriver-mapper
Advanced tools
A utility that makes express-pino logs StackDriver-compatible
yarn add @binxhealth/pino-stackdriver --dev
node server.js | npx pino-stackdriver
Or with a global install:
node server.js | pino-stackdriver
Or create a new stream and pass it to pino
import pino from 'pino';
import { createStream } from '@binxhealth/pino-stackdriver';
const logger = pino(
{
level: 'debug',
},
createStream()
);
logger.info('This works the same as usual...');
logger.error('...and will log to stdout with the correct Stackdriver format');
createStream([destination]) => PumpifyThe exported createStream function takes one optional argument, destination and
returns a pumpify instance.
destination (WritableStream | SonicBoom)Default: process.stdout
The destination parameter, at a minimum must be an object with a write method.
An ordinary Node.js stream can be passed as the destination (such as the result
of fs.createWriteStream).
For peak log writing performance it is strongly
recommended to use pino.destination or pino.extreme to create the destination file stream.
import pino from 'pino';
import { createStream } from '@binxhealth/pino-stackdriver';
// process.stdout by default
const stdoutLogger = pino({}, createStream());
// write the stream to a file
const fileLogger = pino({}, createStream(pino.destination('/log/path')));
FAQs
A utility that makes pino logs StackDriver-compatible
We found that pino-stackdriver-mapper demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.