Security News
Fluent Assertions Faces Backlash After Abandoning Open Source Licensing
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
@achingbrain/follow-registry
Advanced tools
Follows the npm registry and yields change objects when new modules are published
const followRegistry = require('@achinbrain/follow-registry')
// All options are optional
const options = {
// user agent used to request metadata etc
ua: 'npm-registry-follower',
// where to get the changes from
replicator: 'https://replicate.npmjs.com/registry/_changes',
// where to get module details from
registry: 'https://registry.npmjs.com',
// how many sets of metadata to request concurrently
concurrency: 50,
// restart the feed if no changes are received for this long
inactivityTimeout: 3600000,
// how long to wait after inactivityTimeout
inactivityBackoff: 5000,
// how many times to try fetching module metadata
metadataRetries: 5,
// how long to wait between retries
metadataRetryBackoff: 5000,
// override which seq value to start streaming changes from
since: undefined,
// override sequence file storage
seq: {
async read (), // returns a seq number
async write (seq), // stores a seq number
async reset () // resets the seq number
}
}
for await (const { change, done } of followRegistry(options)) {
//...do something with change
console.info(`${change.name} was updated`)
// signal we are done processing this change
//
// Important - if `done` is not called, the change will be
// reprocessed the next time `followRegistry` is run
await done()
}
// read the last sucessfully processed seq
const seq = await follow.seq(options)
// reset the last sucessfully processed seq
await follow.reset(options)
Objects returned from the feed are in the abbreviated format:
Forked from davglass/follow-registry.
FAQs
npm registry follower
The npm package @achingbrain/follow-registry receives a total of 11 weekly downloads. As such, @achingbrain/follow-registry popularity was classified as not popular.
We found that @achingbrain/follow-registry demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.