
Security News
Critical Security Vulnerability in React Server Components
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.
This package is part of NDNts, Named Data Networking libraries for the modern web.
This package implements the logical forwarder, the central piece of NDN stack. It exports a Forwarder type that represents the logical forwarder, and a FwFace type that represents a face attached to the logical forwarder.
You may be wondering: why there's a forwarder in my application? The main purpose is to demultiplex incoming packets. Suppose a producer application can serve multiple kinds of data, the logical forwarder can dispatch incoming Interests of each kind of data to the correct Interest handler function in the application, so that the application does not perform this dispatching itself.
This leads to our definition of the face: a face is a duplex stream of packets.
It could be a connection to another network node or standalone forwarder, as implemented in @ndn/l3face package.
It could also be a part of application logic, as implemented in @ndn/endpoint package.
Creating a FwFace for application logic is a cheap operation: if you need to receive different kinds of packets in separate callback functions, you should create one face per callback function, instead of sharing the same face and attempting to dispatch packets yourself.
A packet transmitted or received on an FwFace is typically an Interest or a Data.
From application logic, it is possible to associate arbitrary metadata, called a token, on an outgoing Interest, and receive them back on the corresponding Data.
You can also send a CancelInterest command to cancel a pending Interest, and receive a RejectInterest notice when the Interest is canceled or has expired.
Obviously, these tokens and commands are not encodable, so they are only available for communication between application logic and the logical forwarder, but cannot appear beyond the NDNts application.
It's sad but NDN does not have a formal forwarding behavior specification. This package implements a simplified version of NDN forwarding behavior specified in NDN-LAN dissertation chapter 3. The main differences from a full forwarder include:
@ndn/repo package.These are subject to change.
FAQs
NDNts: Logical Forwarder
The npm package @ndn/fw receives a total of 7 weekly downloads. As such, @ndn/fw popularity was classified as not popular.
We found that @ndn/fw demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.

Research
/Security News
We spotted a wave of auto-generated “elf-*” npm packages published every two minutes from new accounts, with simple malware variants and early takedowns underway.

Security News
TypeScript 6.0 will be the last JavaScript-based major release, as the project shifts to the TypeScript 7 native toolchain with major build speedups.