
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Compile Cloudflare Workers to Cap'n Proto and deliver them as minimalist Docker images.
Install the CLI with npm i -g selflare and run the following commands in the directory of your worker:
selflare compile # Compile the worker to Cap'n Proto
selflare docker # Generate Dockerfile and docker-compose.yml
docker compose up # Run the worker
All the environment variables defined in [vars] section of the wrangler.toml file will be replaced by the corresponding environment variables in the Docker container.
You can simply set the environment variables in the docker-compose.yml file like this:
version: "3.8"
services:
worker:
build: .
image: worker
volumes:
- ./.storage/cache:/worker/cache
- ./.storage/kv:/worker/kv
- ./.storage/d1:/worker/d1
- ./.storage/r2:/worker/r2
ports:
- "8080:8080"
environment:
- SOME_TOKEN=I_AM_A_TOKEN
The image is based on jacoblincool/workerd which has a size of 35MB (compressed) and supports both amd64 and arm64 architectures.
FAQs
Compile Cloudflare Workers to Cap'n Proto and deliver them as Docker images.
We found that selflare demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.