Gathering detailed insights and metrics for popsicle-transport-http
Gathering detailed insights and metrics for popsicle-transport-http
Popsicle transport for sending requests over HTTP1 and HTTP2
Installations
npm install popsicle-transport-httpReleases
17
Handle socket timeout race conditions
v1.2.1
Published on 15 Nov 2021
Improved timeout support
v1.2.0
Published on 12 Nov 2021
Fix ALPN negotiation over TLS
v1.1.4
Published on 29 Apr 2021
HTTP2 unref after response is ended
v1.1.3
Published on 16 Mar 2021
Use Default `dns.lookup`
v1.1.2
Published on 14 Feb 2021
Allow `secureOptions` option
v1.1.1
Published on 11 Jan 2021
Developer
serviejs
Developer Guide
BETA
Module System
CommonJS
Min. Node Version
Typescript Support
Yes
Node Version
16.13.0
NPM Version
8.1.0
Statistics
3 Stars
69 Commits
2 Watching
1 Branches
1 Contributors
Updated on 15 Nov 2021
Bundle Size
13.25 kB
Minified
4.47 kB
Minified + Gzipped
Languages
TypeScript (100%)
Total Downloads
Cumulative downloads
Total Downloads
13,887,163
Last day
2.3%
15,308
Compared to previous day
Last week
1%
85,211
Compared to previous week
Last month
5%
355,192
Compared to previous month
Last year
25.1%
4,499,232
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
1
Peer Dependencies
1
Versions
Popsicle Transport HTTP
Popsicle transport for sending requests over HTTP1 and HTTP2.
Installation
npm install popsicle-transport-http --save
Usage
1import { transport } from "popsicle-transport-http"; 2 3const req = new Request("/"); 4const res = await transport()(req, done);
Transport Options
The transport function sends the Servie Request to a remote server.
keepAlive?: numberKeep connection alive for re-use with delay between probe (default:5000, 5 seconds)idleSocketTimeout?: numberMaximum duration for a socket to have no traffic (default:300_000, 5 minutes)idleRequestTimeout?: numberMaximum duration for a HTTP request to have no traffic (default:30_000, 30 seconds)servername?: stringOverride remote server name for TLSrejectUnauthorized?: booleanRejects unauthorized TLS connectionsnegotiateHttpVersion?: NegotiateHttpVersionConfigure HTTP version negotiation (default:HTTP2_FOR_HTTPS)lookup?: DnsLookupOverride default DNS resolution (default:dns.lookup)- TLS options:
ca?: string | Buffer | Array<string | Buffer>Set TLS CAcert?: string | BufferSet TLS certificatekey?: string | BufferSet TLS keysecureContext?: SecureContextSet TLS secure contextsecureProtocol?: stringSet TLS secure protocolsecureOptions?: numberSet TLS secure options
- Custom connection managers (default:
Infinityactive sockets):tlsSockets?: ConnectionManager<TLSSocket>netSockets?: ConnectionManager<Socket>http2Sessions?: ConnectionManager<ClientHttp2Session>
- Custom create connections (all methods support async promises):
createHttp2Connection?: (authority, socket) => ClientHttp2SessioncreateNetConnection?: (options) => SocketcreateTlsConnection?: (options) => TLSSocket
TypeScript
This project is written using TypeScript and publishes the definitions directly to NPM.
License
MIT
No vulnerabilities found.
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Info: Found linked content: SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1
- Info: Found text in security policy: SECURITY.md:1
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
dependency not pinned by hash detected -- score normalized to 2
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/serviejs/popsicle-transport-http/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/serviejs/popsicle-transport-http/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/serviejs/popsicle-transport-http/ci.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/serviejs/popsicle-transport-http/ci.yml/main?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:28
- Info: 0 out of 3 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 third-party GitHubAction dependencies pinned
- Info: 1 out of 2 npmCommand dependencies pinned
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/ci.yml:1
- Info: no jobLevel write permissions found
Reason
Found 0/30 approved changesets -- score normalized to 0
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'main'
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 1 are checked with a SAST tool
Reason
14 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
- Warn: Project is vulnerable to: GHSA-v88g-cgmw-v5xw
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
- Warn: Project is vulnerable to: GHSA-m95q-7qp3-xv42
Score
3.2
/10
Last Scanned on 2024-11-18
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More