
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@brechtvdv/actor-init-ldes-client
Advanced tools
An init actor that fetches members from an Event Stream API
Fetches fragments of a TREE Event Stream and emits its data (in the future: members) when a fragment's caching headers has been invalidated In order to avoid receiving duplicate members, we will create in the future a tool filters members by storing it.
npm install -g @brechtvdv/actor-init-ldes-client
In order to use it as a library, you can leave out the -g
.
actor-init-ldes-client --pollingInterval 10000 https://lodi.ilabt.imec.be/coghent/industriemuseum/objecten
The easyest way to create an engine (with default config) is as follows:
const newEngine = require('@brechtvdv/actor-init-ldes-client').default;
const LDESClient = newEngine();
With the engine or client created, you can now use it to call te async createReadStream(url, options)
method.
Here is an example synchronizing with a TREE root node of an Event Stream with polling interval of 5 seconds:
try {
let url = "https://lodi.ilabt.imec.be/coghent/industriemuseum/objecten";
let options = {
"pollingInterval": 5000 // millis
};
let eventstreamSync = LDESClient.createReadStream(url, options);
eventstreamSync.on('data', (data) => {
console.log(data)
});
eventstreamSync.on('end', () => {
console.log("No more data!")
});
} catch (e) {
console.error(e);
}
v1.19.1 - 2021-01-15
<a name="v1.19.0"></a>
FAQs
An init actor that fetches members from an Event Stream API
The npm package @brechtvdv/actor-init-ldes-client receives a total of 0 weekly downloads. As such, @brechtvdv/actor-init-ldes-client popularity was classified as not popular.
We found that @brechtvdv/actor-init-ldes-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.