
Security News
Federal Government Rescinds Software Supply Chain Mandates, Makes SBOMs Optional
The U.S. government is rolling back software supply chain mandates, shifting from mandatory SBOMs and attestations to a risk-based approach.
@hyperswarm/seeders
Advanced tools
A seeders only swarm, verified by a mutable record
npm install @hyperswarm/seeders
Note that the list of seeds are stored in a verifiable record in the DHT, meaning no one can spoof it, but other people can read it.
const Seeders = require('@hyperswarm/seeders')
const swarm = new Seeders(firstSeedPublicKey, {
dht, // optional dht new to use
keyPair, // optional key pair to use, defaults to dht.defaultKeyPair
maxClientConnections // how many connections to make to the seed, defaults to 2
})
swarm.on('connection', function (connection) {
console.log('got connection...')
})
// if you are the first seed, add more seeds by passing a record
if (swarm.owner) {
await swarm.join({
seeds: [
publicKey1,
publicKey2,
...
],
// optionally add info about the hypercore being seeded
core: {
length: 42,
fork: 0
}
})
} else {
await swarm.join()
}
Apache-2.0
FAQs
Only swarm with verified seeders
We found that @hyperswarm/seeders demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The U.S. government is rolling back software supply chain mandates, shifting from mandatory SBOMs and attestations to a risk-based approach.

Security News
crates.io adds a Security tab backed by RustSec advisories and narrows trusted publishing paths to reduce common CI publishing risks.

Research
/Security News
A Chrome extension claiming to hide Amazon ads was found secretly hijacking affiliate links, replacing creators’ tags with its own without user consent.