Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/mediocregopher/radix
Radix is a full-featured Redis client for Go. See the GoDoc for documentation and general usage examples.
THIS PROJECT IS IN BETA. THE TESTS ALL PASS, BUT IT HAS NOT BEEN TESTED IN ANY KIND OF PRODUCTION ENVIRONMENT YET. THE API IS GENERALLY STABLE, THOUGH I MAY MAKE MINOR CHANGES STILL. ALL FEEDBACK IS APPRECIATED!
go get github.com/mediocregopher/radix.v3
# requires a redis server running on 127.0.0.1:6379
go test github.com/mediocregopher/radix.v3
Standard print-like API which supports all current and future redis commands
Support for using an io.Reader as a command argument and writing responses to an io.Writer.
Connection pooling
Helpers for EVAL, SCAN, and pipelining
Support for pubsub, as well as persistent pubsub wherein if a connection is lost a new one transparently replaces it.
Nearly all important types are interfaces, allowing for custom implementations of nearly anything.
As of writing redigo and radix.v3 are fairly comparable, with radix being a couple microseconds slower on average. This is in exchange for being significantly more flexible in most use-cases, but nevertheless is an area for future improvement.
# go test -v -run=XXX -bench=GetSet -benchmem >/tmp/radix.stat
# benchstat radix.stat
name time/op
SerialGetSet/radix 89.1µs ± 7%
SerialGetSet/redigo 87.3µs ± 7%
ParallelGetSet/radix 92.4µs ± 8%
ParallelGetSet/redigo 90.4µs ± 3%
name alloc/op
SerialGetSet/radix 67.0B ± 0%
SerialGetSet/redigo 86.0B ± 0%
ParallelGetSet/radix 99.0B ± 0%
ParallelGetSet/redigo 118B ± 0%
name allocs/op
SerialGetSet/radix 4.00 ± 0%
SerialGetSet/redigo 5.00 ± 0%
ParallelGetSet/radix 5.00 ± 0%
ParallelGetSet/redigo 6.00 ± 0%
Unless otherwise noted, the source files are distributed under the MIT License found in the LICENSE.txt file.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.