
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
serverless-local-alexa-server
Advanced tools
This plugin exposes your Alexa skill functions as local HTTP endpoints, removing the need to deploy every change to AWS Lambda. You can connect these endpoints to your Alexa skill to via forwardhq, ngrok or any other forwarding tool.
This package requires node >= 6.0
npm install serverless-local-alexa-server --save-dev
serverless.yml configuration example:
provider:
name: aws
runtime: nodejs6.10
functions:
hello:
handler: handler.hello
events:
- alexaSkill
# Add serverless-local-alexa-server to your plugins:
plugins:
- serverless-local-alexa-server
serverless local-alexa-server
On default the server listens on port 5005. You can specify another one with the --port argument:
serverless local-alexa-server --port 5000
To automatically restart the server when files change, you may use nodemon:
nodemon --exec "serverless local-alexa-server" -e "js yml json"
For example with forwardhq:
forward 5005
In the Configuration pane, select HTTPS as service endpoint type and specify the forwarded endpoint URL.
As method for SSL Certificate validation select My development endpoint is a sub-domain of a domain that has a wildcard certificate from a certificate authority.
Licensed under the MIT license.
Created and maintained by DieProduktMacher.
FAQs
Develop an Alexa skill without deploying to AWS
We found that serverless-local-alexa-server demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.