
Security News
minimatch Patches 3 High-Severity ReDoS Vulnerabilities
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.
serialport
Advanced tools
Node.js package to access serial ports. Linux, OSX and Windows. Welcome your robotic JavaScript overlords. Better yet, program them!
Working with serial ports can be hard, this is a collection of projects that make it easier.
Go to https://serialport.io/ to learn more, find guides and api documentation.
serialport Chances are you're looking for the serialport package which provides a good set of defaults for most projects. However it is quite easy to mix and match the parts of serialport you need.The Bindings provide a low level interface to work with your serialport. It is possible to use them alone but it's usually easier to use them with an interface.
@serialport/bindings bindings for Linux, Mac and Windows@serialport/binding-abstract as an abstract class to use if you're making your own bindings@serialport/binding-mock for a mock binding package for testingInterfaces take a binding object and provide a different API on top of it. Currently we only ship a Node Stream Interface.
@serialport/stream our traditional Node.js Stream interfaceParsers are used to take raw binary data and transform them into usable messages. This may include tasks such as converting the data to text, emitting useful chunks of data when they have been fully received, or even validating protocols.
Parsers are traditionally Transform streams, but Duplex streams and other non stream interfaces are acceptable.
git clone git@github.com:node-serialport/node-serialport.gitnpm install to setup local package dependencies (run this any time you depend on a package local to this repo)npm test to ensure everything is working properlynpm run generate to generate a new projectYou can develop the docs by running
npm run docs:dev
And build them by running
npm run docs
Docs are automatically built with netlify including previews on branches. The master branch is deployed to https://serialport.io
SerialPort packages are all MIT licensed and all it's dependencies are MIT licensed.
SerialPort follows the Nodebots Code of Conduct. While the code is MIT licensed participation in the community has some rules to make this a good place to work and learn.
SerialPort is currently employees a governance with a group of maintainers, committers and contributors, all fixing bugs and adding features and improving documentation. You need not apply to work on SerialPort, all are welcome to join, build, and maintain this project.
If you have a PR that improves the project people in any or all of the above people will help you land it.
Maintainers
FAQs
Node.js package to access serial ports. Linux, OSX and Windows. Welcome your robotic JavaScript overlords. Better yet, program them!
The npm package serialport receives a total of 158,443 weekly downloads. As such, serialport popularity was classified as popular.
We found that serialport demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.

Research
/Security News
Socket uncovered 26 malicious npm packages tied to North Korea's Contagious Interview campaign, retrieving a live 9-module infostealer and RAT from the adversary's C2.

Research
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.