![Maven Central Adds Sigstore Signature Validation](https://cdn.sanity.io/images/cgdhsj6q/production/7da3bc8a946cfb5df15d7fcf49767faedc72b483-1024x1024.webp?w=400&fit=max&auto=format)
Security News
Maven Central Adds Sigstore Signature Validation
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
@cumulus/cmrjs
Advanced tools
A Node.js client to read from, write to, and delete from NASA's Common Metadata Repository (CMR) API.
Cumulus is a cloud-based data ingest, archive, distribution and management prototype for NASA's future Earth science data streams.
Test with npm run test
.
Documentation on the CMR REST API endpoints is here:
See Cumulus README
[v1.8.1] - 2018-08-01
Note IAM roles should be re-deployed with this release.
@cumulus/integration-tests
: sfnStep
includes getStepInput
which returns the input to the schedule event of a given step function step.@cumulus/deployment
: Lambda processing IAM role includes kinesis::PutRecord
so step function lambdas can write to kinesis streams.@cumulus/api
. Refactored token endpoint to use environment variable flag OAUTH_PROVIDER
when determining with authentication method to use.api_lambda_memory
to @cumulus/api
and @cumulus/deployment
.@cumulus/api
: models/rules.js#addKinesisEventSource
was modified to call to deleteKinesisEventSource
with all required parameters (rule's name, arn and type).@cumulus/integration-tests
: getStepOutput
can now be used to return output of failed steps. If users of this function want the output of a failed event, they can pass a third parameter eventType
as 'failure'
. This function will work as always for steps which completed successfully.Cumulus-726
@cumulus/deployment
: Removed default auto scaling configuration for Granules and Files DynamoDB tables.CUMULUS-688
@cumulus/integration-tests
: api
includes getExecutionStatus
which returns the execution status from the Cumulus APIFAQs
A node SDK for CMR
The npm package @cumulus/cmrjs receives a total of 63 weekly downloads. As such, @cumulus/cmrjs popularity was classified as not popular.
We found that @cumulus/cmrjs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
Security News
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
Research
Security News
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.