
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Simple module to warmup a server application (such as an Express app) by hitting server URLs and performing various tasks. This module also allows a worker to be warmed up before it is added to a cluster.
npm install warmup
var warmup = require('warmup');
warmup(app, tasks, callback);
warmup(app, tasks, options, callback);
Simple example of warming up an Express server application:
var warmup = require('warmup');
var express = require('express');
var app = express();
// ...
warmup(
app,
[
'/foo', // A URL to hit to warmup the server
'/bar', // A URL to hit to warmup the server
{
path: '/baz', // Required
headers: {
'User-Agent': 'xxx'
}
},
function myFunc(callback) { // A custom warmup task
var port = this.port; // The warmup port is there if you need it
callback();
},
{
name: 'My long task', // You can give a task a name for debugging purposes
func: function(callback) {
setTimeout(function() {
callback();
}, 1200);
},
timeout: 2000 // Override the default task timeout
}
],
{
timeout: 1000 // Set a default task timeout
}
function(err) {
if (err) {
// handle error
}
app.listen(8080);
});
Passing the warmup tasks information:
The following options are supported:
The warmup module works by starting the app on a random HTTP port. This allows the application to be started without accepting traffic.
NOTES:
FAQs
Warmup server apps by hitting URLs or performing tasks
The npm package warmup receives a total of 77 weekly downloads. As such, warmup popularity was classified as not popular.
We found that warmup demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.