Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@cumulus/common
Advanced tools
Common libraries used in Cumulus.
npm install @cumulus/common
Cumulus is a cloud-based data ingest, archive, distribution and management prototype for NASA's future Earth science data streams.
To make a contribution, please see our contributing guidelines.
[v7.1.0] 2021-03-12
sync-granule
task will now properly handle syncing 0 byte files to S3rule.queueUrl
property. If provided, this value should be the full URL for an SQS queue.tf-modules/cumulus
module now supports a cmr_custom_host
variable that can
be used to set to an arbitrary host for making CMR requests (e.g.
https://custom-cmr-host.com
).buckets
variable to tf-modules/archive
example/cumulus-tf/orca.tf
and example/cumulus-tf/terraform.tfvars.example
CopyToGlacier
step to example IngestAndPublishGranule workflowchildWorkflowMeta
to queue-pdrs
config. An object passed to this config value will be merged into a child workflow message's meta
object. For an example of how this can be used, see example/cumulus-tf/discover_and_queue_pdrs_with_child_workflow_meta_workflow.asl.json
.rule.queueUrl
property will be used to schedule workflows for that rule. This change allows SQS/Kinesis rules to use any throttled queues defined for a deployment.workflow_start_time
against
the createdAt
field for each record to ensure old records do not
overwrite newer ones<prefix>-lambda-api-gateway
IAM role used by API Gateway Lambda now
supports accessing all buckets defined in your buckets
variable except
"internal" buckets/s3Credentials
endpoint based upon value for
environment variable DISABLE_S3_CREDENTIALS
. If set to "true", the
endpoint will not dispense S3 credentials and instead return a message
indicating that the endpoint has been disabled./elasticsearch
endpoint's reindex
function to prevent
reindexing when source and destination indices are the same.waitForAsyncOperationStatus
to take a retryObject
and use exponential backoff. Increased the total test duration for both
AsycOperation specs and the ReconciliationReports tests.queueUrl
from the parameters object for @cumulus/message/Build.buildQueueMessageFromTemplate
queueUrl
from the parameters object for @cumulus/message/Build.buildCumulusMeta
@cumulus/ingest/S3ProviderClient.sync()
preventing 0 byte files from being synced to S3.tf-modules/archive
:
private_buckets
protected_buckets
public_buckets
FAQs
Common utilities used across tasks
The npm package @cumulus/common receives a total of 194 weekly downloads. As such, @cumulus/common popularity was classified as not popular.
We found that @cumulus/common demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.