
Security News
Package Maintainers Call for Improvements to GitHub’s New npm Security Plan
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
@automerge/automerge-repo-sync-server
Advanced tools
A very simple automerge-repo synchronization server. It pairs with the websocket client protocol found in `@automerge/automerge-repo-network-websocket`.
A very simple automerge-repo synchronization server. It pairs with the websocket client protocol
found in @automerge/automerge-repo-network-websocket
.
The server is an unsecured Express app. It is really just for demonstration purposes at this point; you probably don't want to use it for anything real yet. This isn't a great way to operate (or the only way) but it's a useful demonstration of what a client/server deployment might look like.
Before getting started, make sure you've run yarn
, and yarn build
at the root of the monorepo. This will install all your dependencies and make sure the other libraries are compiled.
yarn start:syncserver
Set up basic firewall:
$ sudo ufw allow OpenSSH
$ sudo ufw allow http
$ sudo ufw allow https
$ sudo ufw enable
Install git:
$ sudo apt-get install git
Install node:
$ curl -fsSL https://deb.nodesource.com/setup_18.x | sudo -E bash - &&\
sudo apt-get install -y nodejs
Clone repo (may require setting up ssh keys to clone from github)
$ git clone git@github.com:automerge-repo/automerge-repo-sync-server.git
Build everything:
$ cd automerge-repo-sync-server
$ yarn build
Run a server:
$ PORT=<your preferred port> yarn start
Originally written by @pvh.
FAQs
A very simple automerge-repo synchronization server. It pairs with the websocket client protocol found in `@automerge/automerge-repo-network-websocket`.
The npm package @automerge/automerge-repo-sync-server receives a total of 24 weekly downloads. As such, @automerge/automerge-repo-sync-server popularity was classified as not popular.
We found that @automerge/automerge-repo-sync-server demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.