
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
github.com/cassioroos/grpc_currency
This is a simple test of GRPC, the idea is to enrich this server later.
You will have to install protoc to generate the code and grpcurl to test the code.
sudo apt install protobuf-compiler
brew install protoc
Then run the build command:
protoc -I protos/ protos/currency.proto --go_out=plugins=grpc:protos/currency
or
make protos
As this is a POC, all ports and configurations are hardcoded the app will run on port :9098
go run main.go
With grpcurl installed we can test our server
grpcurl --plaintext localhost:9092 list
Currency
grpc.reflection.v1alpha.ServerReflection
grpcurl --plaintext localhost:9098 list Currency
Currency.GetRate
grpcurl --plaintext localhost:9098 describe Currency.GetRate
Currency.GetRate is a method:
rpc GetRate ( .RateRequest ) returns ( .RateResponse );
grpcurl --plaintext localhost:9098 describe .RateRequest
RateRequest is a message:
message RateRequest {
string Base = 1;
string Destination = 2;
}
grpcurl --plaintext -d '{"Base": "BR", "Destination": "USD"}' localhost:9098 Currency/GetRate
{
"rate": 5.37
}
{ "Base" : "BRL", "Destination" : "USD" }
{ "Base" : "BRL", "Destination" : "EUR" }
grpcurl --plaintext -d @ localhost:9098 Currency/SubscribeRates
grpcurl --plaintext localhost:9098 HealthCheck/Check
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.