# sqreen

> Node.js agent for Sqreen, please see https://www.sqreen.io/

Latest version **2.0.2** (published 2023-01-18) · proprietary-free-to-use license · 0 weekly downloads

## Install

```sh
npm install sqreen
pnpm add sqreen
yarn add sqreen
bun add sqreen
```

Provides the command `sqreen-check-network`.

## Health

**Score 15/100 (F)** — status: abandoned.

Positive: no vulnerabilities.

Warnings: low downloads; no types; no esm support.

Negative: abandoned; low maintenance score.

## Facts

| | |
|---|---|
| Version | 2.0.2 |
| Published | 2023-01-18 |
| First published | 2016-05-23 |
| Weekly downloads | 0 |
| License | proprietary-free-to-use |
| TypeScript types | none |
| Module format | CommonJS |
| Node | >=4.0 |
| Dependencies | 23 |
| Unpacked size | 726.8 KB |
| Known vulnerabilities | 0 (+2 in 2 direct dependencies) |
| Install scripts | no |
| Author | sqreen |
| Maintainers | vdeturckheim, jbaviat |
| Keywords | security, sqreen, RASP, rasp, sql, injection, injections, xss, nosql, injection, crawler, express, hapi, passport, hacker, tor |

## Links

- npm: https://www.npmjs.com/package/sqreen
- Homepage: https://www.sqreen.com/
- npm.io page: https://npm.io/package/sqreen

## Dependencies (23)

- [ip](https://npm.io/package/ip.md) ^1.1.4
- [flat](https://npm.io/package/flat.md) ^5.0.2
- [uuid](https://npm.io/package/uuid.md) ^3.1.0
- [mkdirp](https://npm.io/package/mkdirp.md) ^0.5.1
- [semver](https://npm.io/package/semver.md) ^5.2.0
- [shimmer](https://npm.io/package/shimmer.md) ^1.2.0
- [winston](https://npm.io/package/winston.md) ^2.4.6
- [ip-router](https://npm.io/package/ip-router.md) ^1.0.0
- [sq-native](https://npm.io/package/sq-native.md) 1.0.10
- [async-lock](https://npm.io/package/async-lock.md) ^1.2.2
- [sqreen-sdk](https://npm.io/package/sqreen-sdk.md) ^0.8.1
- [escape-html](https://npm.io/package/escape-html.md) ^1.0.3
- [joi-browser](https://npm.io/package/joi-browser.md) ^10.6.1
- [on-finished](https://npm.io/package/on-finished.md) ^2.3.0
- [cls-bluebird](https://npm.io/package/cls-bluebird.md) ^2.0.1
- [sq-ecosystem](https://npm.io/package/sq-ecosystem.md) 0.21.2
- [async-listener](https://npm.io/package/async-listener.md) ^0.6.0
- [ip-range-check](https://npm.io/package/ip-range-check.md) 0.0.2
- [emitter-listener](https://npm.io/package/emitter-listener.md) ^1.1.1
- [http-proxy-agent](https://npm.io/package/http-proxy-agent.md) ^2.1.0
- [https-proxy-agent](https://npm.io/package/https-proxy-agent.md) ^3.0.0
- [recursive-readdir](https://npm.io/package/recursive-readdir.md) ^2.1.0
- [express-list-endpoints](https://npm.io/package/express-list-endpoints.md) 4.0.1

## Alternatives

- [@pothos/plugin-authz](https://npm.io/package/@pothos/plugin-authz.md) — 12.4K weekly downloads
- [@bounded-sh/client](https://npm.io/package/@bounded-sh/client.md) — 3.2K weekly downloads
- [@luigi-project/plugin-auth-oauth2](https://npm.io/package/@luigi-project/plugin-auth-oauth2.md) — 2.3K weekly downloads
- [@nocobase/plugin-verification](https://npm.io/package/@nocobase/plugin-verification.md) — 2.0K weekly downloads
- [escher-request](https://npm.io/package/escher-request.md) — 545 weekly downloads

## Recent versions

- 2.0.2 (latest) — 2023-01-18
- 2.0.1 — 2022-06-30
- 2.0.0 — 2022-05-11
- 1.64.2 — 2021-08-09
- 1.64.1 — 2021-07-19
- 1.64.0 — 2021-07-08
- 1.63.0 — 2021-04-29
- 1.62.0 — 2021-03-08
- 1.61.0 — 2021-01-25
- 1.60.1 — 2021-01-21
- 1.60.0 — 2021-01-20
- 1.59.0 — 2021-01-14
- 1.58.0 — 2021-01-11
- 1.57.1 — 2021-01-05
- 1.57.0 — 2020-12-16
- … 190 more at https://npm.io/package/sqreen/versions

## README

![Sqreen](https://s3-eu-west-1.amazonaws.com/sqreen-assets/npm/20171113/sqreen_horizontal_250.png)

# [Sqreen](https://www.sqreen.com/) Node.js Agent

Sqreen agent monitors functions in the application (I/O, authentication, network, command execution, etc.) and provides dedicated security logic at run-time.

Sqreen protects applications against common security threats.

Here are some security events which can be blocked and reported:
* Database injection (SQL/NoSQL)
* Cross-site scripting attack
* Significant bad bot / scan activity against the application (scans which require attention)
* Peak of HTTP errors (40x, 50x) related to security activity against the application
* Target (human) investigation led against your application
* New vulnerabilities detected in a third-party modules used by the application

Sqreen also monitors authentication activity inside the application to detect and block account takeover attacks.

For more details, visit [sqreen.com](https://www.sqreen.com/)

## Installation

You will need first to [signup](https://my.sqreen.com/signup) to get a token.

Then, where your `package.json` file stands, run:

```shell script
npm install --save sqreen
```
And
```shell script
cat > sqreen.json <<EOF
{
  "app_name": "YOUR_APPLICATION_NAME",
  "token": "YOUR_SQREEN_TOKEN"
}
EOF
```

At the top of the main module of your app, add:
```js
require('sqreen')
```

## Compatibility

This agent is compatible with Node.js 4 and higher.

For other compatibility related information, please visit [the compatibility page](https://docs.sqreen.com/nodejs/compatibility/).

## Documentation

Documentation is available on [this page](https://docs.sqreen.com/).

## LICENSE

Sqreen for Node.js is free-to-use, proprietary software.

---
_Source: https://npm.io/package/sqreen · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._