
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@lolpants/jogger
Advanced tools
Elegant JSON logging system
Jogger is still in the pre-release phase. It may not be particularly optimised, and the public API is still subject to change. Use in production at your own risk.
Jogger is published to the NPM registry as @lolpants/jogger. Install it with your NPM client of choice.
Jogger splits the logging process up into loggers and sinks. Loggers are responsible for parsing fields and outputting formatted JSON log lines to sinks. Sinks are responsible for sending log lines to various outputs (ie: stdout). One logger can have many sinks, and send each log line to all registered sinks. One sink can be used by many loggers. This has the advantage of allowing multiple loggers to access the same resource (eg: file descriptor) simultaneously.
All public methods are documented using JSDoc, your IDE should provide you with enough context. Refer to the example below for a basic setup.
Note that by default debug and trace level logs are discarded. You must manually enable them in each sink's config.
import { createConsoleSink, createLogger, field } from '@lolpants/jogger'
// Enable debug log level
const consoleSink = createConsoleSink({ debug: true })
const logger = createLogger({
name: 'app',
sink: [consoleSink],
})
logger.info({ a: 'b' })
logger.warn({ reason: 'http server down' })
logger.debug({ deep: { x: true, y: false } })
FAQs
Elegant JSON logging system
We found that @lolpants/jogger demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.