
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
An alternative api for the opentok js library.
$ npm install --save tokalite
'use strict';
var tokalite = require('tokalite');
var token = '(your opentok token)';
Promise.all(
tokalite.connect(token),
tokalite.createPublisher()
).then(function(res) {
var session = res[0];
var publisher = res[1];
publisher.publish(session);
session.on('stream', function(stream) {
stream.subscribe();
});
});
tokalite.connect(token)Takes an opentok token and returns a promise to a Session.
Session| Method | Description |
|---|---|
.isConnected() | Returns a boolean indicating whether the connection is still alive. |
.getDisconnectionPromise() | Returns a promise that resolves when the session is disconnected. |
.getStreams() | Returns an array of external streams associated with the session (no publishers). |
| Event | Description |
|---|---|
| stream | Emits a Stream when one becomes available. |
Stream| Method | Description |
|---|---|
.subscribe(targetElement?, properties?) | Returns a promise to a Subscriber. Optional arguments targetElement and properties are passed to session.subscribe in opentok.js |
.isConnected() | Returns a boolean indicating whether the stream is still available. |
.getDisconnectionPromise() | Returns a promise that resolves when the stream becomes unavailable. |
Subscriber| Method | Description |
|---|---|
| remove | Removes the subscriber from the DOM and the subscription to the stream. |
| Property | Description |
|---|---|
| stream | The stream being subscribed to. |
tokalite.createPublisher(targetElement?, properties?)Returns a promise to a Publisher. targetElement and properties are optional and passed to OT.initPublisher().
Publisher| Method | Description |
|---|---|
.publish(session) | Publishes to the provided session. Returns a promise to a PublishHandle. |
.remove() | Removes the publisher from the DOM and any session published to. |
PublishHandle| Method | Description |
|---|---|
.stop() | Stops publishing to the session. |
MIT © Andrew Morris
FAQs
An alternative api for the opentok js library.
We found that tokalite demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.