
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
github.com/ppickett-pivotal/mysql-timeline
Parse and format logs from a MySQL Galera cluster
originally written by Stephen Carter
The tool parses known log lines (that I understand!) and generates a consolidated timeline of the events that happened on a cluster.
You still need to figure out what actually happened on the cluster but this is great to get a highlevel overview before digging deeper in to the logs.
mysql-timeline
was created using go1.8.3
so make sure you have at least that version installed:
go get github.com/ppickett-pivotal/mysql-timeline
go install github.com/ppickett-pivotal/mysql-timeline
mysql-timeline NODE0_LOG NODE1_LOG NODE2_LOG > timeline.html
timeline.html
in your favourite browser.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.