
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
@andern/redis
Advanced tools
👷🏽 TODO: This project is made with publish-ts, read the docs to learn more.
👷🏽 TODO: Read all the sections marked with "👷🏽 TODO", do them, and remove them from this README.
// a nice code example here
// would be pretty nice!
import { andernRedis } from '@andern/redis'
console.log(andernRedis().msg)
Node:
npm i @andern/redis
Browser / Deno:
import { andernRedis } from 'https://esm.sh/@andern/redis'
👷🏽 TODO: add the most important necessary imports from @andern/redis here.
👷🏽 TODO: explain in details what @andern/redis does.
// perhaps with some nice code examples.
import { andernRedis } from '@andern/redis'
console.log(andernRedis().msg)
You need node, NPM to start and git to start.
# clone the code
git clone git@github.com:loreanvictor/andern-redis.git
# install stuff
npm i
Make sure all checks are successful on your PRs. This includes all tests passing, high code coverage, correct typings and abiding all the linting rules. The code is typed with TypeScript, Jest is used for testing and coverage reports, ESLint and TypeScript ESLint are used for linting. Subsequently, IDE integrations for TypeScript and ESLint would make your life much easier (for example, VSCode supports TypeScript out of the box and has this nice ESLint plugin), but you could also use the following commands:
# run tests
npm test
# check code coverage
npm run coverage
# run linter
npm run lint
# run type checker
npm run typecheck
FAQs
redis binding for andern
The npm package @andern/redis receives a total of 0 weekly downloads. As such, @andern/redis popularity was classified as not popular.
We found that @andern/redis demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.