Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@cumulus/common
Advanced tools
Common libraries used in Cumulus.
npm install @cumulus/common
Cumulus is a cloud-based data ingest, archive, distribution and management prototype for NASA's future Earth science data streams.
To make a contribution, please see our contributing guidelines.
[v1.20.0] 2020-03-12
record
and the type of event under event
. Messages with deleted
events will have the record that was deleted with a deletedAt
timestamp. Options for event
are Create | Update | Delete
deploy_to_ngap
is now a required variable for the tf-modules/cumulus
module. For those deploying to NGAP environments, this variable should always be set to true
.CUMULUS-1739 - You can now exclude Elasticsearch from your tf-modules/data-persistence
deployment (via include_elasticsearch = false
) and your tf-modules/cumulus
module will still deploy successfully.
CUMULUS-1769 - If you set deploy_to_ngap = true
for the tf-modules/archive
Terraform module, you can only deploy your archive API gateway as PRIVATE
, not EDGE
.
@cumulus/aws-client/S3.getS3ObjectReadStreamAsync()
to deal with S3 eventual consistency issues by checking for the existence an S3 object with retries before getting a readable stream for that object.deploy_to_ngap
boolean variable for the tf-modules/cumulus
and tf-modules/archive
Terraform modules. This variable is required. For those deploying to NGAP environments, this variable should always be set to true
.AccessToken.get()
now enforces strongly consistent reads from DynamoDBtf-modules/data-persistence
to make Elasticsearch alarm resources and outputs conditional on the include_elasticsearch
variable@cumulus/aws-client/S3.getObjectSize
to include automatic retries for any failures from S3.headObject
@cumulus/api/lib/DistributionEvent.remoteIP()
to parse the IP address in an S3 access log from the A-sourceip
query parameter if present, otherwise fallback to the original parsing behavior.stats/summary
endpoint reports the distinct collections for the number of granules reportedCUMULUS-1739 - Fixed the tf-modules/cumulus
and tf-modules/archive
modules to make these Elasticsearch variables truly optional:
elasticsearch_domain_arn
elasticsearch_hostname
elasticsearch_security_group_id
CUMULUS-1768
stats/
endpoint so that data is correctly filtered by timestamp and processingTime
is calculated correctly.CUMULUS-1769
tf-modules/archive
Terraform module, the lifecycle
block ignoring changes to the policy
of the archive API gateway is now only enforced if deploy_to_ngap = true
. This fixes a bug where users deploying outside of NGAP could not update their API gateway's resource policy when going from PRIVATE
to EDGE
, preventing their API from being accessed publicly.CUMULUS-1775
stats/histogram
and stats/average
. All advanced stats needs should be acquired from Cloud Metrics or similarly configured ELK stack.FAQs
Common utilities used across tasks
The npm package @cumulus/common receives a total of 438 weekly downloads. As such, @cumulus/common popularity was classified as not popular.
We found that @cumulus/common demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.