
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
slicknode-runtime
Advanced tools
**IMPORTANT:** This library should be considered an implementation detail and should not be used directly. Please consult the [Slicknode documentation](https://slicknode.com/docs/) on how to create and write runtime handlers.
IMPORTANT: This library should be considered an implementation detail and should not be used directly. Please consult the Slicknode documentation on how to create and write runtime handlers.
Lightweight zero dependency wrapper to process calls from Slicknode GraphQL servers to custom runtime handlers in NodeJS.
Features:
npm install slicknode-runtime
This library is intended to be used with Slicknode
import { SlicknodeRuntime } from 'slicknode-runtime';
const runtime = new SlicknodeRuntime({
// The secret key that requests are signed with by the Slicknode GraphQL server
// Requests are rejected on mismatch
// Defaults to process.env.SLICKNODE_SECRET
// If none provided and SLICKNODE_SECRET env variable is not set, authentication is
// skipped (insecure, for testing only)
secret: 'somesecretkey',
// Optional: The maximum allowed clockdrift in seconds for signature timestamps between the
// two servers
// Default: 120
maxClockDrift: 30,
// Watch for file-system changes (for development mode) and always execute current code that
// is stored on disk without process restart. Executes the handler in a service worker
watch: false,
});
// Register slicknode modules
runtime.register('@private/my-slicknode-module-id', 'path-to-node-module');
// ...
// Execute by passing the request body (as string) and an object of the
// request headers. Then return as HTTP response...
//
// For express for example:
app.use(
bodyParser.raw({
type: 'application/json',
})
);
app.post('/', async (req, res) => {
const data = await runtime.execute(req.body.toString(), req.headers);
return res.json(data);
});
FAQs
**IMPORTANT:** This library should be considered an implementation detail and should not be used directly. Please consult the [Slicknode documentation](https://slicknode.com/docs/) on how to create and write runtime handlers.
We found that slicknode-runtime demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.