
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
An HTTP development server that serves static files and reloads the browser when files change. If the configured port is already in use, sable automatically tries the next one, so multiple projects can run side by side without any configuration changes.
No installation required. Run the following command to serve the current directory:
npx sable .
The server URL is printed to stdout once it is ready. Edit any file in the directory and the browser reloads automatically.
npm install sable --save-dev
$ sable -h
Usage: sable [options] [documentRoot...]
Starts an HTTP development server
Options:
-V, --version Output the version number
-p, --port <n> Port number for HTTP/HTTPS (default: 4000)
-h, --host <s> Host name to bind
-v, --verbose Enable verbose logging
--noWatch Set the watch option to false
-i, --index <s> Value for the index option (default: index.html)
-F, --fileOperations Enable all file operations (upload, delete, text upload)
--allowFileUpload Enable file upload
--allowDelete Enable file deletion
--allowTextUpload Enable text upload
[documentRoot...] Directories that contain files to be served
-h, --help Output usage information
import {startServer} from 'sable';
startServer({/* options */})
.then((server) => console.log(server.address()))
startServer supports all options from middleware-static-livereload, plus
port, host, and middlewares.
interface SableOptions extends Partial<MiddlewareOptions> {
/**
* The first argument of server.listen()
* https://nodejs.org/api/net.html#net_server_listen_port_host_backlog_callback
* @default 4000
*/
port?: number,
/**
* The second argument of server.listen()
* https://nodejs.org/api/net.html#net_server_listen_port_host_backlog_callback
* @default undefined
*/
host?: string,
/**
* A list of middlewares.
* @default []
*/
middlewares?: Array<connect.HandleFunction>,
}
The sable project is licensed under the terms of the Apache 2.0 License.
FAQs
HTTP development server with file watching
The npm package sable receives a total of 21 weekly downloads. As such, sable popularity was classified as not popular.
We found that sable demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.