Use this package as a library in your application to monitor your dependencies and to learn how the vulnerable functions of the dependencies are invoked in your deployments.
require('@snyk/nodejs-runtime-agent')({projectId: <Your-Project-ID>});The Node.js Runtime Agent is tested on Node 8 and Node 10. Other versions are unsupported.
require('@snyk/nodejs-runtime-agent')(config);The config object supports the following options:
| Key | Type | Default value | Purpose |
|---|---|---|---|
projectId | String | The Snyk project ID that matches your application. | |
enable | Boolean | true | Set to false to disable the agent. |
Advanced config options:
| Key | Type | Default value | Purpose |
|---|---|---|---|
beaconIntervalMs | Number | 60000 | Report frequency in milliseconds. |
snapshotIntervalMs | Number | 3600000 | Snapshot retrieval frequency in milliseconds. |
flushOnExit | Boolean | true | Set to false to prevent the agent from flushing its data before exiting. true is useful especially for short-lived environments. |
There is a self-contained demo named node-woof, which you can clone and run. It will guide you through the setup of the project on your machine.
npm start brings up an http server that invokes a vulnerable function
on startup and for every request.