Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@pimred/solrcloud
Advanced tools
Connect to a SolrCloud in node.js.
This library uses Zookeeper to determine the connection to the SolrCloud and returns an instance of Axios that can be used to send requests to the Solr node.
A list of Solr nodes is being retrieved from Zookeeper. The Solr node is being selected randomly.
A basic failover implementation is done by selecting a new node if a request fails.
npm install --save @pimred/solr-cloud
const solrCloud = require('@pimred/solr-cloud')
const options = {
zkConnectionString: 'Connection to Zookeeper',
collection: 'Name of the Solr collection'
}
solrCloud.createClient(options).then(client => {
client.get('select', {
params: {
q: '*:*'
}
}).then(response => console.log(response.data))
})
This creates the Solr client which is in fact an instance of axios.
Options
Name | Required | Description |
---|---|---|
zkConnectionString | x | Connection string to Zookeeper| |
collection | x | Name of the collection in Solr |
maxRetries | Maximum number of retries when handling a failed request to Solr |
https://github.com/alexguan/node-zookeeper-client#documentation
connectionString String - Comma separated host:port pairs, each represents a ZooKeeper server. You can optionally append a chroot path, then the client would be rooted at the given path. e.g.
'localhost:3000,locahost:3001,localhost:3002'
'localhost:2181,localhost:2182/test'
Escape special characters that are part of the query syntax of Lucene
Options
Name | Required | Description |
---|---|---|
input | x | string to escape |
FAQs
Connect to a SolrCloud in node.js.
The npm package @pimred/solrcloud receives a total of 3 weekly downloads. As such, @pimred/solrcloud popularity was classified as not popular.
We found that @pimred/solrcloud demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.