
Security News
Node.js Drops Bug Bounty Rewards After Funding Dries Up
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.
url-examiner
Advanced tools
A small Node.js tool & library that checks URL from a given CSV input file and report the analysis results in a new CSV output file.
You need a working version of:
# Basic
npx url-examiner -i input_file.csv -o output_file.csv
# Advanced (fullname)
npx url-examiner \
--input input_file.csv \
--output output_file.csv \
--timeout 5000 \
--headers "Authorization: Bearer xxx.yyy.zzz"
--headers "User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:64.0) Gecko/20100101 Firefox/80.0"
--from 10
--to 200
--bulk 50
# Advanced (shortcut)
npx url-examiner \
-i input_file.csv \
-o output_file.csv \
-m 5000 \
-H "Authorization: Bearer xxx.yyy.zzz"
-H "User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:64.0) Gecko/20100101 Firefox/80.0"
-f 10
-t 200
-b 50
Options:
| option | description | default value |
|---|---|---|
| -d --delay number | delay (in ms) between two URL calls | None |
| -b --bulk number | number of concurrent HTTP calls during analysis phase | 10 |
| -f --from number | line "from" | None |
| -H --headers headers... | HTTP request headers | None |
| (required) -i --input input_file | input file path | None |
| -m --timeout max-time | max time allowed to succeed an HTTP check request | 1000 |
| -o --ouput filepath | ouput file path | None |
| -s --separator character | column separator | ; |
| -t --to number | line "to" | None |
Input file:
Supported file extension: .csv
Supported data format (without head line):
<reference>;<url>
Output file:

npm install url-examiner
import Program from './Program';
const program = new Program();
program.run('my-app -i input_file.csv -o output_file.csv').then(() => process.exit(0));
FAQs
Node images URL checker
We found that url-examiner demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.