
Security News
RubyGems Adds Cooldown Feature to Bundler for Newly Published Gems
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.
KISS (Keep It Simple, Stupid) server monitoring tool with email alerts.
For those who want to keep it simple instead of using complex setups like Prometheus, Grafana, and Alertmanager.
go install pkg.rbrt.fr/servmon@latest
Edit ~/.servmon.yaml or /etc/servmon/config.yaml:
alert_thresholds:
cpu:
threshold: 90
duration: 5m0s
cooldown: 30m0s
check_interval: 10s
memory:
threshold: 80
cooldown: 30m0s
check_interval: 10s
disks:
- path: /
threshold: 90
cooldown: 4h0m0s
check_interval: 1m0s
http:
url: http://localhost:8080/health
timeout: 5s
sample_rate: 10
failure_threshold: 20
check_interval: 1m0s
cooldown: 15m0s
journalctl:
enabled: true
check_interval: 5m0s
lookback_period: 5m0s
error_threshold: 10
priority: err
cooldown: 30m0s
reboot:
enabled: true
uptime_threshold: 10m0s
email:
smtp_server: smtp.gmail.com
smtp_port: 587
from: alerts@yourdomain.com
to: admin@yourdomain.com
username: alerts@yourdomain.com
password: your-app-password
servmon --config ~/.servmon.yaml
# Start
sudo systemctl start servmon
# Enable auto-start
sudo systemctl enable servmon
# View logs
sudo journalctl -u servmon -f
# Check status
sudo systemctl status servmon
MIT.
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.