
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
@layer0/devtools
Advanced tools
In-browser devtools for the Layer0
You need both @layer0/devtools and @layer0/prefetch installed in your project
npm install --save @layer0/devtools @layer0/prefetch
You need to enable @layer0/prefetch in your service worker.
Check our prefetching guide, or @layer0/prefetch README for more information
Note: you can skip this step if you are using @layer0/next or @layer0/nuxt
Then load the widget in the Browser's javascript
import installDevtools from '@layer0/devtools/install'
installDevtools()
Alternatively you can also inject the widget install script directly in your HTML <head>
<script defer src="/__layer0__/devtools/install.js"></script>
By default, the devtools is enabled when your app is served from localhost, 127.0.0.1 or any *.layer0.link domain.
But that can be customized:
In Layer0 console environment, set the PREVIEW_LAYER0_DEVTOOLS_ENABLED to true or false to explicitly enable or disable the devtools on the given environment, no matter what domain it runs on.
Point your browser to /__layer0__/devtools/enable or /__layer0__/devtools/disable to explicitly enable/disable the devtools on your browser. This takes precedence over the environment config and the domain default.
If the devtools was previously enabled and you disable it, you may want to remove the service worker to get rid of the devtools-specific route handlers that were installed on-demand when enabling it. This can be done using the Application tab in Chrome Developer Tools.
FAQs
In-browser devtools for the [Layer0](https://layer0.co/)
The npm package @layer0/devtools receives a total of 4,963 weekly downloads. As such, @layer0/devtools popularity was classified as popular.
We found that @layer0/devtools demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.