
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
@infernetprotocol/engine
Advanced tools
Inference engine abstraction for Infernet — pluggable backends (Mojo+MAX, in-process stub) over a stable async-iterator API.
Pluggable inference engine for the Infernet daemon. One async-iterator API across backends; the consumer (chat executor, future job runners) doesn't care which is loaded.
| Backend | Where it runs | When it's selected |
|---|---|---|
ollama | Local Ollama daemon (HTTP) | Default when Ollama is reachable on OLLAMA_HOST |
mojo | External Mojo+MAX binary | INFERNET_ENGINE_BIN set, or backend:"mojo" (experimental) |
stub | In-process canned tokens | Fallback when neither is available — daemon still works |
Ollama is the recommended default. It already solves model download
ollama pull qwen2.5:7b, and they're serving.The mojo backend is kept for the eventual case where a custom Mojo+MAX
binary is worth squeezing extra perf out of — see
engine/mojo/ for the scaffold.
import { createEngine } from "@infernetprotocol/engine";
const engine = await createEngine(); // auto-selects backend
const { id, stream, cancel } = engine.generate({
messages: [{ role: "user", content: "hi" }],
model: "qwen2.5:7b"
});
for await (const ev of stream) {
if (ev.type === "token") process.stdout.write(ev.text);
if (ev.type === "done") console.log("\nfinished:", ev.reason);
if (ev.type === "error") throw new Error(ev.message);
}
await engine.shutdown();
INFERNET_ENGINE_BACKEND env var (explicit override: ollama, mojo, stub)INFERNET_ENGINE_BIN set → mojoOLLAMA_HOST (default http://localhost:11434) → ollamastub# 1. Install Ollama (one line per platform — see ollama.com).
curl -fsSL https://ollama.com/install.sh | sh
# 2. Pull whichever model your node will serve.
ollama pull qwen2.5:7b # 4.4 GB — fits a 6+ GB GPU
ollama pull qwen2.5:0.5b # 400 MB — useful for CPU smoke tests
# 3. Tell the daemon which model this node serves.
INFERNET_ENGINE_MODEL=qwen2.5:7b infernet start
Pick whichever model fits your VRAM. Qwen 2.5 family is a reasonable default; the engine is model-agnostic.
mojo backendThe Mojo backend communicates with its binary over NDJSON v1 stdio.
Source of truth: src/protocol.js; mirrored on the
Mojo side in engine/mojo/src/main.mojo.
Bumping PROTOCOL_VERSION is a breaking change — both sides must move
together.
The Ollama backend talks HTTP to the operator's Ollama daemon, so the v1 protocol is purely an internal-IPC concern there.
pnpm vitest run tests/engine.test.js — 16 tests covering:
EngineProcess against test/fake-engine.js (Node script speaking the
protocol — no Mojo toolchain required)createEngine auto-selectionFAQs
Inference engine abstraction for Infernet — pluggable backends (Mojo+MAX, in-process stub) over a stable async-iterator API.
The npm package @infernetprotocol/engine receives a total of 0 weekly downloads. As such, @infernetprotocol/engine popularity was classified as not popular.
We found that @infernetprotocol/engine demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.