
Security News
curl Shuts Down Bug Bounty Program After Flood of AI Slop Reports
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.
A Go implementation of a WebSub server. It has been tested to pass every WebSub Rocks! Hub test.
See examples/main.go for a basic example which uses boltdb and a simple publisher.
Importing:
go get meow.tf/websub
Content-Type forwarding.Specific stores can be implemented/used to store subscriptions and call them.
If you'd like to implement your own store, the following interface can be implemented:
// Store defines an interface for stores to implement for data storage.
type Store interface {
// All returns all subscriptions for the specified topic.
All(topic string) ([]model.Subscription, error)
// For returns the subscriptions for the specified callback
For(callback string) ([]model.Subscription, error)
// Add saves/adds a subscription to the store.
Add(sub model.Subscription) error
// Get retrieves a subscription given a topic and callback.
Get(topic, callback string) (*model.Subscription, error)
// Remove removes a subscription from the store.
Remove(sub model.Subscription) error
}
A memory-backed store. This store is cleared when the application is restarted.
A boltdb/bbolt backed store which persists to disk.
This hub system uses Workers to implement a system that can be infinitely scaled by adding other nodes/servers and workers which can pull off a queue.
By default, the worker pool is a basic channel + goroutine handler that goes through each request.
type Worker interface {
Add(f PublishJob)
Start()
Stop()
}
When implementing workers, pay attention to the fields. ContentType is used to say what the body content type is (required by the specification), and if subscription.secret is set it MUST be used to generate an X-Hub-Signature header.
If you wish to bypass the included hub.mode=publish handler, you can use the Publish function to publish your own data.
For example, if you're taking an event off some kind of queue/event subscriber:
hub.Publish("https://example.com", "application/json", []byte("{}"))
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.

Product
Scan results now load faster and remain consistent over time, with stable URLs and on-demand rescans for fresh security data.

Product
Socket's new Alert Details page is designed to surface more context, with a clearer layout, reachability dependency chains, and structured review.