
Research
Security News
The Growing Risk of Malicious Browser Extensions
Socket researchers uncover how browser extensions in trusted stores are used to hijack sessions, redirect traffic, and manipulate user behavior.
github.com/mirovarga/cmsd
Turn files into a headless CMS.
NB: This project is a (working) prototype to see if it can be useful at all.
CMSd is a tool that turns files into a headless CMS.
It takes a glob pattern, indexes the matching files and exposes them via a readonly REST API.
To index and serve all files from the current directory follow these steps:
Download a release and unpack it into a directory.
cd
to the directory.
Run the REST API server:
$ ./cmsd
2023/04/28 01:24:43 Indexing files matching '*'
2023/04/28 01:24:43 Indexed 9 files
2023/04/28 01:24:43 Running on http://localhost:3000
2023/04/28 01:24:43 Ctrl+C to quit
Go to http://localhost:3000/items to see all
indexed files.
The following will index all files in the current directory and start a REST API server.
$ cmsd
To index other files just specify a glob pattern as an argument, like this:
$ cmsd '*.md'
Notice the single quotes - we need to pass the argument as is, because (some) shells try to interpret the pattern and you would get different set of files than expected.
To start the REST API server on a different port specify the -p
option, like
this:
$ cmsd '*.md' -p 4000
GET /items
You can filter the returned items using the following query parameters:
You can also sort the returned items using the sort
query parameter.
It recognizes the following values:
Adding a
-
before a value will sort the items in descending order.
GET items/:id
id
is always the same - it is computed fromfull-path
.
GET /items/:id/raw
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover how browser extensions in trusted stores are used to hijack sessions, redirect traffic, and manipulate user behavior.
Research
Security News
An in-depth analysis of credential stealers, crypto drainers, cryptojackers, and clipboard hijackers abusing open source package registries to compromise Web3 development environments.
Security News
pnpm 10.12.1 introduces a global virtual store for faster installs and new options for managing dependencies with version catalogs.