
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
round-logger
Advanced tools
A simple rotative logger for Node.js, based on the great packages winston and winston-daily-rotate-file.
Ready-to-Go. These packages are very powerful and rich of potentialities but their configuration takes some time. Therefore, I built a pre-configured rotative logger ready to be used! It offers a lot of possibilities to configure the logging behaviour, however the only required option is the absolute path of the logging files.
Automatic directories. By default, the log files are stored in different directories by year-month (named with the pattern "yyyy-mm"). A big problem for winston-daily-rotate-file is that it does not create automatically the directories when they do not exist. My solution provides the automatic creation of the directories which not exists.
const LoggerFactory = require('round-logger');
const Logger = LoggerFactory.create({
enabled:true,
directory_logs_abs_path:__dirname+'/my-logs', //absolute path needed
});
// Set your own global Logger object...
global.Logger = Logger;
//...or replace the global console object
global.console = Logger
my-logs
├── 2017-11
│ ├── 2017-11-29-error.log
│ ├── 2017-11-29-log.log
│ ├── 2017-11-30-error.log
│ └── 2017-11-30-log.log
└── 2017-12
├── 2017-12-01-error.log
├── 2017-12-01-log.log
├── 2017-12-01-error.log.1
├── 2017-12-01-log.log.1
├── 2017-12-01-error.log.2
├── 2017-12-01-log.log.2
├── 2017-12-02-error.log
└── 2017-12-02-log.log
__directory.I am still working on this project. So, please, report me any kind of bug or requests about new features. You can do it on GitHub Issues or via email. I will try to solve each issues in a reasonable time.
FAQs
A rotative file logger for NodeJS based on winston logger.
We found that round-logger demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.