Security News
Research
Supply Chain Attack on Rspack npm Packages Injects Cryptojacking Malware
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
@cumulus/common
Advanced tools
Common libraries used in Cumulus.
npm install @cumulus/common
Cumulus is a cloud-based data ingest, archive, distribution and management prototype for NASA's future Earth science data streams.
To make a contribution, please see our contributing guidelines.
[v9.1.0] 2021-06-03
update-granules-cmr-metadata-file-links
task, the
granule UMM-G metadata should have version 1.6.2 or later, since CMR s3
link type 'GET DATA VIA DIRECT ACCESS' is not valid until UMM-G version
1.6.2EarthdataLoginClient
to
@cumulus/oauth-client/EarthdataLoginClient
and updated all references in
Cumulus Core.EarthdataLoginClient
property from earthdataLoginUrl
to
`loginUrl for consistency with new OAuth clients. See example in
oauth-client
README/s3credentials
endpoint to distribute
same-region read-only tokens based on a user's CMR ACLs./s3credentials
endpoint for distribution API/s3credentialsREADME
endpoint to distribution APItf-modules/cumulus_distribution
module to take earthdata or cognito credentialsexample/cumulus-tf/cumulus_distribution.tf
to use CSDAP credentialsS3ObjectStore
to aws-client
. This class allows for interaction with the S3 object store.object-store
package which contains abstracted object store functions for working with various cloud providers/
, /login
and /logout
endpoints to cumulus distribution apiisISOFile()
to check if a CMR file is a CMR ISO file.@cumulus/ingest/sqs
:
archiveSqsMessageToS3
- archives an incoming SQS message to S3deleteArchivedMessageFromS3
- deletes a processed SQS message from S3archiveSqsMessageToS3
to sqs-message-consumer
which
archives all incoming SQS messages to S3.deleteArchivedMessageFrom
to sqs-message-remover
which
deletes archived SQS message from S3 once it has been processed.@cumulus/api/es/*
code to new @cumulus/es-client
packagesfEventSqsToDbRecords
Lambda to 60 seconds to match
timeout for Knex library to acquire database connections@cumulus/cmrjs
updateCMRMetadata
and related functions to add
both HTTPS URLS and S3 URIs to CMR metadata.update-granules-cmr-metadata-file-links
task to add both HTTPS
URLs and S3 URIs to the OnlineAccessURLs field of CMR metadata. The task
configuration parameter cmrGranuleUrlType
now has default value both
.update-granules-cmr-metadata-file-links
task, the
granule UMM-G metadata should have version 1.6.2 or later, since CMR s3 link
type 'GET DATA VIA DIRECT ACCESS' is not valid until UMM-G version
1.6.2@cumulus/earthdata-login-client
to more generic
@cumulus/oauth-client
as a parent class for new OAuth clients.@cumulus/oauth-client/CognitoClient
to interface with AWS cognito login service.@cumulus/cmrjs
package:
@cumulus/cmrjs/cmr-utils.getGranuleTemporalInfo()
so it now
returns temporal info for CMR ISO 19115 SMAP XML files.@cumulus/cmrjs/cmr-utils.isCmrFilename()
to include
isISOFile()
.api-client/granules
functions as opposed to granulesApi from @cumulus/integration-tests
.remoteAltBucket
on download
method to allow for per-file override of
provider bucket for checksumremoteAltBucket
to allow for an override of the passed in provider
bucket for the source file/elasticsearch/index-from-database
from starting.docs/README.md
FAQs
Common utilities used across tasks
The npm package @cumulus/common receives a total of 438 weekly downloads. As such, @cumulus/common popularity was classified as not popular.
We found that @cumulus/common demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.
Security News
Sonar’s acquisition of Tidelift highlights a growing industry shift toward sustainable open source funding, addressing maintainer burnout and critical software dependencies.