
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@nephele/plugin-read-only
Advanced tools
A Nephele plugin to make a path read-only.
npm i -s @nephele/plugin-read-only
The default export is the plugin, and it's also a named export "Plugin". Instantiate this class, and give that to Nephele as a plugin.
import express from 'express';
import nepheleServer from 'nephele';
import ExampleAdapter from '@nephele/adapter-example';
import ExampleAuthenticator from '@nephele/authenticator-example';
import ReadOnlyPlugin from '@nephele/plugin-read-only';
const app = express();
const port = 8080;
app.use(
'/',
nepheleServer({
adapter: new ExampleAdapter(),
authenticator: new ExampleAuthenticator(),
plugins: [new ReadOnlyPlugin()],
}),
);
app.listen(port, (err) => {
if (err) {
console.error(err);
return;
}
console.log(`Nephele WebDAV server listening on port ${port}`);
});
This plugin is useful if you want to make a WebDAV server accessible publicly, but without all of the write/modify features enabled.
Copyright 2022-2025 SciActive Inc
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
FAQs
Read-only path plugin for the Nephele WebDAV server.
We found that @nephele/plugin-read-only demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.