
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
@iov/stream
Advanced tools
@iov/stream are some helper methods and classes to ceal with stream processing.
As BCP's BlockchainConnection exposes a Stream based event API, and
tendermint/RpcClient exposes Stream based subscriptions, there is common useful
functionality for creating and consuming streams both in applications as well as
in the test code.
This package is part of the IOV-Core repository, licensed under the Apache License 2.0 (see NOTICE and LICENSE).
FAQs
Utility functions for producing and consuming Streams
The npm package @iov/stream receives a total of 234 weekly downloads. As such, @iov/stream popularity was classified as not popular.
We found that @iov/stream demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.