Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
github.com/bkrebsbach/simple-job-queue
Simple in-memory job queue with a REST API.
Run make test
Run make lint
Run go run main.go
The queue exposes a REST API that producers and consumers perform HTTP requests against in JSON. The queue supports the following operations:
/jobs/enqueue
Add a job to the queue. The job definition can be found below. Returns the ID of the job
/jobs/dequeue
Returns a job from the queue Jobs are considered available for Dequeue if the job has not been concluded and has not dequeued already
/jobs/{job_id}/conclude
Provided an input of a job ID, finish execution on the job and consider it done
/jobs/{job_id}
Given an input of a job ID, get information about a job tracked by the queue
A job has the following attributes as part of its public API:
ID
: an integer to uniquely represent a jobThe ID is assigned to a job by the queue once the job is enqueued
Type
: a string representing the class of operationThere are two types: TIME_CRITICAL
and NOT_TIME_CRITICAL
. Type is sent from the producer when a job is enqueued.
The Type is not considered by dequeue’s business logic.
Status
: an enum value indicating the current stage of the jobs’ execution.There are 3 statuses: QUEUED
, IN_PROGRESS
, CONCLUDED
An example job returned from jobs/{job_id}
could look like:
{
"ID": 951,
"Type": "TIME_CRITICAL",
"Status": "IN_PROGRESS"
}
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.