
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
@lifeomic/gradual-feature-toggle-tools
Advanced tools
Provides a set of helper functions to make gradual, non-binary, feature toggle use easier
A set of tools to make gradual rollout of features easier
When a new feature is being rolled out and is currently 50% enabled, then
ideally 50% of the users would get the new behavior. The enablement of the new
behavior should be uniform as the feature value is increased and should not be
biased by the usernames or feature names. For example, if you use e-mail
addresses then ideally the enablement of @gmail.com users would be evenly
spread across the range of enablement. The testcases assert that uniform
distribution is true.
Given a feature an a user, this code can help you decide whether a user should receive the new behavior or not:
import { calculateUserEnablementThreshold } from 'gradual-feature-toggle-tools';
const featureValue = // some lookup of a feature's current value (from 0 - 100)
const userThreshold = await calculateUserEnablementThreshold('some-feature', 'some-user');
if (featureValue > userThredshold) {
// Use the new behavior
} else {
// Use the old behavior
}
FAQs
Provides a set of helper functions to make gradual, non-binary, feature toggle use easier
We found that @lifeomic/gradual-feature-toggle-tools demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.