
Security News
PHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites Offline
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
@picassio/sync-core
Advanced tools
Platform-neutral contracts and crash-safe ordered client state machine for WebObsidian Sync Protocol 1.0
Shared, platform-neutral Sync Protocol 1.0 contracts and deterministic client state machine for WebObsidian Central Sync. It includes strict Zod schemas/types, path policy, SHA-256 helpers, replay/conflict primitives, golden fixtures, and ordered manifest/catch-up/apply-intent/offline-queue orchestration.
import { OrderedSyncClient, HandshakeResponseSchema, PROTOCOL_VERSION } from '@picassio/sync-core';
Adapters provide persistence, transport, and local materialization; this package performs no filesystem, Obsidian, browser, or credential storage itself. A client must durably record an apply intent before local materialization and advance/acknowledge its cursor only afterward.
MIT licensed. Protocol 1.0 is pre-stable until the corresponding WebObsidian stable release is published.
FAQs
Platform-neutral contracts and crash-safe ordered client state machine for WebObsidian Sync Protocol 1.0
The npm package @picassio/sync-core receives a total of 1 weekly downloads. As such, @picassio/sync-core popularity was classified as not popular.
We found that @picassio/sync-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.