Security News
PyPI’s New Archival Feature Closes a Major Security Gap
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
github.com/brandur/simplebox
Package simplebox provides a simple, easy-to-use cryptographic API where all of the hard decisions have been made for you in advance. The backing cryptography is XSalsa20 and Poly1305, which are known to be secure and fast.
This package is a Golang port of the RbNaCl module of the same name.
go get github.com/brandur/simplebox
Please see godoc for usage information and examples.
go test ./...
Fetch changes to the repo and any new tags. Export VERSION
by incrementing the last tag according to semantic versioning:
git checkout master && git pull --rebase
export VERSION=v0.x.y
Prepare a PR with the changes, updating CHANGELOG.md
with any necessary additions at the same time. Have it reviewed and merged.
Upon merge, pull down the changes, tag each module with the new version, and push the new tags:
git pull origin master
git tag $VERSION
git push --tags
Cut a new GitHub release by visiting new release, selecting the new tag, and copying in the version's CHANGELOG.md
content as the release body.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
Research
Security News
Malicious npm package postcss-optimizer delivers BeaverTail malware, targeting developer systems; similarities to past campaigns suggest a North Korean connection.
Security News
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.