
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
requests-pool
Advanced tools
A simple node module to make http requests using a pool.
It'll allow you to limit your requests to avoid the crash of distant server when you're crawling.
var Rp = require('requests-pool');
var rp = new Rp(100);
rp.query(options, datas, function(errors, res) {
if (errors)
throw errors;
});
It's using the http.request() node method, so errors will be the error throwed by this method and res the object sent to the callback of this object. options are the options sent as the first argument of this method.
datas are the datas you want to send if you are doing a POST request.
max is the number of maximum simultaneous requests. Default value is 100.
A getter/setter for the number of maximum simultaneous requests.
A getter for the number of current requests.
A getter for the number of waiting requests.
A getter to know if the request pool is alive. If false, no more requests can be added.
options is the same argument as passed to http.request() native method.
data is the data sent used in a POST request. If not null, the header fields Content-Type and Content-Length will be automatically filled.
cb is a callback that take two arguments: the error (or undefined) and the res object getted by the callback of the http.request() method (or undefined if an error occur).
If you want to use https, you need to set options.protocol to 'https'.
You can set options.retry to true if you want to relaunch the request if it fails.
Remove all the current pending requests and no more can be added.
May be used after rp.exit to make the request pool re-usable.
Emeraude
FAQs
A simple node module to make http requests using a pool.
We found that requests-pool demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.