
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
plugin-system
Advanced tools
Library (for NodeJS) designed to load plugins from given folders, and from objects. It will let you get all the plugins from a folder (including children folders on multiple levels). You can also give it your custom plugins as objects.
To install the library, just use npm:
npm install plugin-system
The library will send back a function to use like this:
var loadPlugins = require('plugin-system');
loadPlugins(
{
paths: [
'/path/to/plugins',
'/path/to/other/plugins'
],
custom: [
{
name: 'MyPlugin1',
},
{
name: 'MyPlugin2',
},
{
name: 'MyPlugin3',
}
],
})
.then(function onSuccess(plugins) {
// plugins is an array of all the plugins loaded (using require on file/folders & merge with the custom plugins given)
})
.catch(function onError(err) {
})
The configuration object take two arrays:
paths: all the path to check. It will search through the path and the full hierarchy.custom: A collection of your custom plugins, defined as function/object/...The promise will send any error (err) that has happened during the process, and plugins will be an array of your plugins.
The paths will be processed separately, and will load the plugins (using require()) like this:
/.+\.js$/ regex)require(pathToFolder)FAQs
Library to help loading plugins from different locations
We found that plugin-system demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.