
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
require-guard
Advanced tools
Prevent files and modules being required more than once. Helps with auto-reloaders or test runners that insist.
Require Guard is a library for Node.js that prevents files from being required and loaded more than once.
When you find yourself fighting code-reloaders or test runners like Mocha to stop reloading your slow initialization code each cycle, and no one else can help, maybe you can hire the Require Guard.
"Hey, but doesn't Node.js' require itself not require files twice?"
Yes, but those pesky code-reloaders and test runners, for your own good, unload everything between [test] cycles to keep things fresh. For such cases Require Guard is the sliced bread beneath your toast. Run that external process or slow op once and not worry that it gets run again.
Install with: npm install require-guard
Then you have 3 ways:
Prevent the current file from being reloaded:
require("require-guard")()
Prevent an already loaded library (also takes an array) from being reloaded:
require("selenium-webdriver")
require("require-guard")("selenium-webdriver")
Prevent an already loaded file (also takes an array) from being reloaded:
require("./start-browser")
require("require-guard")("./start-browser")
As an example, let's say you're using Mocha with Selenium WebDriver. Because Selenium starts up as fast as an old Lada engine, you'll want to boot it up once when starting Mocha's watcher and then get on your merry way with testing.
./test/browser.js:
require("require-guard")()
var WebDriver = require("selenium-webdriver")
module.exports = new WebDriver.Builder().build()
./test/test.js:
var browser = require("./browser")
describe("The Internet", function() { ... })
Then, while mocha --watch reruns and reruns your tests, your browser will remain open and will get reused.
Require Guard is released under a Lesser GNU Affero General Public License, which in summary means:
For more convoluted language, see the LICENSE file.
Andri Möll typed this and the code.
Monday Calendar supported the engineering work.
If you find Require Guard has muscles that need improving, please type to me at andri@dot.ee or create an issue.
FAQs
Prevent files and modules being required more than once. Helps with auto-reloaders or test runners that insist.
We found that require-guard demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.