
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@nomad-xyz/config
Advanced tools
This is a crate for working with nomad configuration files. These config files contain information about the state of Nomad deployments.
It also includes an auto-generated TS/WASM library.
The core library is mostly a JSON config file format. We define Rust structs and TS types for all parts of this config.
In TS, the object is a native JS object. It is not a reference to a wasm type.
Assignment and access can be done as normal. However, we have also exported
functions that perform consistency-critical operations like addNetwork and
addCore. We strongly recommend using these instead of assigning to the
relevant sections.
$ cargo buildTo build the wasm library:
$ ./package-it.shwasm-pack docs are found here.
$ cargo test$ cargo docs --open$ cargo publish$ ./publish_it.shTo work around some wasm-bindgen limitations, we currently (unfortunately)
have to manually define TS types for the rust structs. These are found in the
data directory. When a rust struct is updated or added, the corresponding
definitions should be added in data/definitions.ts and data/types.rs. At
compile-time these files are combind to src/wasm/types.rs.
In the future it'd be cool to auto-generate this code :)
FAQs
Nomad project configuration file utilities
The npm package @nomad-xyz/config receives a total of 33 weekly downloads. As such, @nomad-xyz/config popularity was classified as not popular.
We found that @nomad-xyz/config demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.