
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@algovoi/cloudevents
Advanced tools
Emit an AlgoVoi keystone decision as a CloudEvents 1.0 event with execution_ref as the content-addressed id (Apache-2.0). Byte-identical to algovoi-cloudevents (PyPI).
Emit an AlgoVoi keystone decision as a CloudEvents 1.0 event. The
content-addressed execution_ref is the event id; the keystone references live in data and the
standard id / subject attributes (no invented context extension attributes, so the event stays
spec-conformant). A consumer recomputes execution_ref from data with only JCS (RFC 8785) +
SHA-256 and confirms it equals the event id.
from algovoi_cloudevents import to_cloudevent, verify_cloudevent_execution_ref
ev = to_cloudevent(decision_ref=dr, action_type="payment", scope="payments/transfer",
outcome="COMMITTED", executed_at_ms=1716460800000,
source="did:web:api.algovoi.co.uk", stage="execution")
assert verify_cloudevent_execution_ref(ev) # recompute from data, offline
Apache-2.0.
FAQs
Emit an AlgoVoi keystone decision as a CloudEvents 1.0 event with execution_ref as the content-addressed id (Apache-2.0). Byte-identical to algovoi-cloudevents (PyPI).
We found that @algovoi/cloudevents demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.