Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
serialport
Advanced tools
Node.js package to access serial ports. Linux, OSX and Windows. Welcome your robotic JavaScript overlords. Better yet, program them!
Access serial ports with JavaScript. Linux, OSX and Windows. Welcome your robotic JavaScript overlords. Better yet, program them!
Go to https://serialport.io/ to learn more, find guides and api documentation.
serialport
Chances are you're looking for the serialport
package which provides a good set of defaults for most projects. However it is quite easy to mix and match the parts of serialport you need.The Bindings provide a low level interface to work with your serialport. It is possible to use them alone but it's usually easier to use them with an interface.
@serialport/bindings-cpp
bindings for Linux, Mac and Windows@serialport/bindings-interface
a typescript interface to use if you're making your own bindings@serialport/binding-mock
for a mock binding package for testingInterfaces take a binding object and provide a different API on top of it. Currently we only ship a Node Stream Interface.
@serialport/stream
our traditional Node.js Stream interfaceParsers are used to take raw binary data and transform them into usable messages. This may include tasks such as converting the data to text, emitting useful chunks of data when they have been fully received, or even validating protocols.
Parsers are traditionally Transform streams, but Duplex streams and other non stream interfaces are acceptable.
git clone git@github.com:serialport/node-serialport.git
npm install
to setup local package dependencies (run this any time you depend on a package local to this repo)npm test
to ensure everything is working properlyYou can develop the docs with in the website repo.
Docs are automatically built with vercel including previews on branches. The main branch is deployed to https://serialport.io
SerialPort packages are all MIT licensed and all it's dependencies are MIT licensed.
SerialPort follows the Nodebots Code of Conduct. While the code is MIT licensed participation in the community has some rules to make this a good place to work and learn.
SerialPort is currently employees a governance with a group of maintainers, committers and contributors, all fixing bugs and adding features and improving documentation. You need not apply to work on SerialPort, all are welcome to join, build, and maintain this project.
If you have a PR that improves the project people in any or all of the above people will help you land it.
FAQs
Node.js package to access serial ports. Linux, OSX and Windows. Welcome your robotic JavaScript overlords. Better yet, program them!
The npm package serialport receives a total of 79,052 weekly downloads. As such, serialport popularity was classified as popular.
We found that serialport demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.