Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
watchify-middleware
Advanced tools
A simple middleware for watchify which provides a few features for a better development experience:
'log'
eventFor practical implementations, see watchify-server or budo.
npm install watchify-middleware --save
var watchifyMiddleware = require('watchify-middleware')
var defaultIndex = require('simple-html-index')
var staticUrl = 'bundle.js'
var bundler = browserify('app.js', {
// config for watchify
cache: {},
packageCache: {},
basedir: __dirname
})
var watchify = watchifyMiddleware(bundler)
var server = http.createServer(function (req, res) {
if (req.url === '/') {
defaultIndex({ entry: staticUrl }).pipe(res)
} else if (req.url === '/' + staticUrl) {
watchify(req, res)
}
})
server.listen(8000, 'localhost', function () {
console.log('Listening on http://localhost:8000/')
})
For a more complete example, see example/server.js.
middleware = watchifyMiddleware(browserify[, opt])
Returns a middleware(req, res)
function from the given browserify
bundler instance and options:
delay
(default 0) a delay to debounce the rebuild, useful for things like git branch switches (where hundreds of files may change at once)errorHandler
(default false) a boolean or function for handling errorsinitialBundle
(default true) whether to initially bundle and emit 'pending'
errorHandler
can be a function that accepts (err)
parameter and optionally returns the new contents (String|Buffer) of the JavaScript bundle. If errorHandler
is true
, it will default to the following:
var stripAnsi = require('strip-ansi')
function defaultErrorHandler (err) {
console.error('%s', err)
var msg = stripAnsi(err.message)
return ';console.error(' + JSON.stringify(msg) + ');'
}
(some plugins produce ANSI color codes in error messages)
Otherwise, it assumes the normal behaviour for error handling (which is typically just an uncaught error event).
emitter = watchifyMiddleware.emitter(browserify[, opt])
The same as above, except this returns an EventEmitter for handling bundle updates.
emitter.middleware
The middleware(req, res)
function for use in your server.
emitter.bundle()
Triggers a bundle event. Usually should only be called if initialBundle
is set to false, to trigger the initial bundle.
emitter.on('pending', fn)
Called when watchify begins its incremental rebuild.
emitter.on('update', fn)
Called when bundling is finished, with parameter (contents, rows)
.
contents
is a Buffer/String of the bundle and rows
is a list of dependencies that have changed since last update. On first run, this will be an empty array.
emitter.on('log', fn)
Provides timing and server request logging, passing an (event)
parameter.
Server request logs look like this:
{ level: 'debug', type: 'request', message: 'bundle (pending|ready)'}
Bundle updates look like this:
{ elapsed: Number, level: 'info', type: 'bundle' }
These events work well with garnish and other ndjson-based tools.
emitter.on('error', fn)
If errorHandler
was fasle
, this will get triggered on bundle errors. If an error handler is being used, this will not get triggered.
emitter.on('bundle-error', fn)
This will get triggered on bundle errors, regardless of whether errorHandler
is being used. This can be used to respond to syntax errors, such as showing a stylized notification.
emitter.close()
Closes the watchify
instance and stops file watching.
version = watchifyMiddleware.getWatchifyVersion()
Primarily useful for debugging, this will return the actual version number of the watchify
module being used by watchify-middleware
.
To run the example, first git clone and install dependencies.
git clone https://github.com/mattdesl/watchify-middleware.git
cd watchify-middleware
npm install
Then:
npm start
And open http://localhost:8000/. Try making changes to example/app.js and you will see timing information in console, and reloading the browser will provide the new bundle.
MIT, see LICENSE.md for details.
FAQs
a server for faster watchify development
The npm package watchify-middleware receives a total of 6,638 weekly downloads. As such, watchify-middleware popularity was classified as popular.
We found that watchify-middleware demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.