An Active Typosquatting Campaign Targeting npm Users — Security supply chain company Phylum detected a campaign to ‘typosquat’ against a variety of high profile packages. The idea behind typosquatting is that you claim package names similar to others, such as ‘expresss’ for
1
express
or ‘ignroe’ for
1
ignore
. The discovered packages were removed from the npm registry but this is an issue to keep an eye out for.
Louis Lang (Phylum)
Axios 1.0: A Reasonably Popular HTTP Client Library — We thought you’d like an understatement.. 😁 With 96k GitHub stars and a presence in many thousands of apps, Axios is very popular and it’s amazing it’s just now reached 1.0. The Fetch API has taken much of its thunder, but like jQuery, it wraps up a lot of functionality into a broadly liked API. v1.0 has lots of minor tweaks and enhancements, but is mostly business as usual. (Official homepage.)
On Quality Code: Node.js Design Patterns and Performance — A written transcript of an interview with Luciano Mammino, the author of Node.js Design Patterns, covering all sorts of areas from serverless architecture to design patterns and streams.
Find Tech Jobs with Hired — Create a profile on Hired to connect with hiring managers at growing startups and Fortune 500 companies. It’s free for job-seekers.
#561 — January 7, 2025 Read on the Web Happy New Year! We’re now back every week all the way till mid February, so if you’ve got anything you want to submit for inclusion in Read more…
#560 — December 17, 2024 Read on the Web 🎄 This week we cover a few news items but quickly get into a 2024 roundup of Node news and the most clicked items of the Read more…
#559 — December 10, 2024 Read on the Web 🎄 The Node world is experiencing a post-Thanksgiving interfestal lull, so this issue includes a few items we overlooked earlier this year. Next week brings our Read more…
0 Comments