Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
snowplow-tracker
Advanced tools
Add analytics to your JavaScript and TypeScript Node.js applications and servers with the Snowplow Node.js Tracker.
This tracker lets you collect event data from Node.js applications.
Technical Docs | Setup Guide | Contributing |
---|---|---|
Technical Docs | Setup Guide | Contributing |
Make sure you have node
and npm
installed and in your $PATH
.
Install npm dependencies using npm install
:
git clone git@github.com:snowplow/snowplow-nodejs-tracker.git
cd snowplow-nodejs-tracker
npm install
npm run build
npm test
The Snowplow Node.js Tracker is copyright 2014-2020 Snowplow Analytics Ltd.
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this software except in compliance with the License.
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
FAQs
Node.js tracker for Snowplow
The npm package snowplow-tracker receives a total of 1,371 weekly downloads. As such, snowplow-tracker popularity was classified as popular.
We found that snowplow-tracker demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.