
Product
Introducing Supply Chain Attack Campaigns Tracking in the Socket Dashboard
Campaign-level threat intelligence in Socket now shows when active supply chain attacks affect your repositories and packages.
该插件提供 Prometheus 信息采集功能,方便集成到 Prometheus,可采集下列信息:
github.com/Monibuca/plugin-exporter
import (
_ "m7s.live/plugin/exporter/v4"
)
exporter:
printcollectors: true # 是否打印开启的采集器,默认 true
nodeaddr: zh_cn #节点位置
enabled: "[defaults]" #默认开启的采集器,如果是 defaults,在 yaml 里要用双引号,可以设置开启的采集器,名称见上
collector: #每个采集器的配置,仅 cpu net 两个采集器有配置
cpu:
percpu: false #是否分别统计每个处理器
net:
nicwhitelist: ".*" #网卡黑白名单,支持正则表达式,默认所有
nicblacklist: ""
/exporter/api/metrics
在 scrape_configs 下添加一个 job ,比如:
scrape_configs:
- job_name: "monibuca_exporter"
static_configs:
- targets: ["ip:port/exporter/api/metrics"]
亦可基于本插件,开发自定义的采集器,只需要实现Collector接口,即 prometheus.Collector 和 engine.OnEvent 的接口,并提供一个构建函数,可以参考 collector/cpu.go。
在构建函数里,会提供 exporter.collector 下的配置。
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Campaign-level threat intelligence in Socket now shows when active supply chain attacks affect your repositories and packages.

Research
Malicious PyPI package sympy-dev targets SymPy users, a Python symbolic math library with 85 million monthly downloads.

Security News
Node.js 25.4.0 makes require(esm) stable, formalizing CommonJS and ESM compatibility across supported Node versions.