Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
google.golang.org/genproto
go get google.golang.org/genproto/...
WARNING(2023-05-26): New submodules: upgrade before 2024-03-01 to avoid ambiguous import errors with google.golang.org/genproto. See #1015 for more information.
IMPORTANT This repository is currently experimental. The structure of the contained packages is subject to change. Please see the original source repositories (listed below) to find out the status of the each protocol buffer's associated service.
This repository contains the generated Go packages for common protocol buffer types, and the generated gRPC code necessary for interacting with Google's gRPC APIs.
The sources for the proto files used in this repository:
googleapis
is derived from this
repo. The packages here contain types specifically for interacting with Google
APIs.Historically, the packages in the protobuf
directory used to contain
generated code for certain well-known types hosted by google/protobuf.
These types are now hosted by the google.golang.org/protobuf
module
and type aliases are used to forward declarations in this module over to
declarations in the protobuf
module.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.