
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@philips-software/backstage-plugin-upptime-frontend
Advanced tools
This plugin shows uptime and response statistics from an Upptime repository.
It works with both public and private repositories and uses the backend authentication you already have in place in your backend, for instance GitHub app authentication.
# From your Backstage root directory
yarn add --cwd packages/app @philips-software/backstage-plugin-upptime-frontend
EntityUpptimeCard
to the EntityPage: // packages/app/src/components/catalog/EntityPage.tsx
+ import { EntityUpptimeCard } from '@philips-software/backstage-plugin-upptime-frontend';
...
const overviewContent = (
<Grid container spacing={3} alignItems="stretch">
<Grid item md={6}>
<EntityAboutCard variant="gridItem" />
</Grid>
+ <Grid item md={6}>
+ <EntityUpptimeCard />
+ </Grid>
</Grid>
);
yarn install
yarn tsc
upptime.js.org/key
annotation to the catalog-info.yaml
file of theapiVersion: backstage.io/v1alpha1
kind: Component
metadata:
name: backstage
description: |
Backstage is an open-source developer portal that puts the developer
experience first.
annotations:
upptime.js.org/key: YOUR_INSTANCE_NAME/YOUR_PROJECT_KEY
spec:
type: library
owner: CNCF
lifecycle: experimental
YOUR_INSTANCE_NAME/
is optional and will query the default instance if not provided.
FAQs
Unknown package
The npm package @philips-software/backstage-plugin-upptime-frontend receives a total of 12 weekly downloads. As such, @philips-software/backstage-plugin-upptime-frontend popularity was classified as not popular.
We found that @philips-software/backstage-plugin-upptime-frontend demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.