
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@dispatch-foo/protocol
Advanced tools
Reference engine for the Dispatch Messaging Protocol: addresses, envelopes, gates, delivery and a SQLite store.
The reference implementation of the
Dispatch Messaging Protocol (DMP), under the
MIT license: address parsing, the message envelope and its validation, gates,
the delivery engine and a SQLite message store. Dispatch's daemon runs it; any
host can embed it by implementing MessagingHost.
npm install @dispatch-foo/protocol
It runs on Node 22.13 or later, and on Bun. Its entry points:
@dispatch-foo/protocol: the engine, the store and the envelope rules;@dispatch-foo/protocol/browser: the registry constants and gate predicates
alone, for code that must not reach node:sqlite;@dispatch-foo/protocol/conformance: the adapter that runs the DMP
conformance kit against this engine, also installed as the
dmp-reference-adapter bin;@dispatch-foo/protocol/federation: the federation wire types of DMP's
Appendix F.The specification, its registries and its conformance kit are in
@dispatch-foo/protocol-spec.
FAQs
Reference engine for the Dispatch Messaging Protocol: addresses, envelopes, gates, delivery and a SQLite store.
We found that @dispatch-foo/protocol demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.