
Security News
gem.coop Tests Dependency Cooldowns as Package Ecosystems Move to Slow Down Attacks
gem.coop is testing registry-level dependency cooldowns to limit exposure during the brief window when malicious gems are most likely to spread.
trpc.group/trpc-go/trpc-gateway/plugin/routercheck
Advanced tools
Implement functionality similar to nginx -t, which checks the router configuration before updating it.
Usage:
Security:
This plugin calls the router's CheckAndInit() method to validate and initialize the configuration. Consider the security implications of this operation:
By calling the configured /gateway/check endpoint and passing the router configuration in YAML format, the plugin calls router.CheckAndInit() to validate the router configuration.
Example Request:
POST http://{gateway_host}/gateway/check
Content-Type: application/octet-stream
router: # Route configuration
- method: ^/v1/user/ # Regex route
is_regexp: true # Whether it is a regex route, set to true to perform regex matching
id: "path:^/v1/user/" # Route ID, used to identify a route for debugging (method will be duplicated)
rewrite: /v1/user/info # Rewrite path
target_service: # Upstream services
- service: trpc.user.service # Service name, corresponding to the name in the client configuration
weight: 10 # Service weight, the sum of weights cannot be 0
client: # Upstream service configuration, consistent with the trpc protocol
- name: trpc.user.service
namespace: Development
network: tcp
target: xxxx
protocol: fasthttp
import (
_ "trpc.group/trpc-go/trpc-gateway/plugin/routercheck"
)
Note: Make sure to register it in server.service.filter, not server.filter.
global: # Global configuration
server: # Server configuration
filter: # Interceptor list for all service handlers
service: # Business services provided, can have multiple
- name: trpc.inews.trpc.gateway # Service routing name
filter:
- routercheck # Gateway plugin registered in the service filter, allowing dynamic loading in router.yaml
plugins: # Plugin configuration
log: # Log configuration
gateway: # Plugin type is gateway
routercheck: # Router configuration check
router: # 路由配置
- method: /gateway/check
id: "xxxxxx"
target_service:
- service: trpc.user.service
plugins:
- name: routercheck # 路由级别插件:腾讯网鉴权插件
client: # 上游服务配置,与trpc协议一致
- name: trpc.user.service
plugins:
plugins:
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
gem.coop is testing registry-level dependency cooldowns to limit exposure during the brief window when malicious gems are most likely to spread.

Security News
Following multiple malicious extension incidents, Open VSX outlines new safeguards designed to catch risky uploads earlier.

Research
/Security News
Threat actors compromised four oorzc Open VSX extensions with more than 22,000 downloads, pushing malicious versions that install a staged loader, evade Russian-locale systems, pull C2 from Solana memos, and steal macOS credentials and wallets.