
Security News
Critical Security Vulnerability in React Server Components
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.
@pulumiverse/harbor
Advanced tools
The Harbor Resource Provider lets you manage Harbor resources.
This package is available for several languages/platforms:
To use from JavaScript or TypeScript in Node.js, install using either npm:
npm install @pulumiverse/harbor
or yarn:
yarn add @pulumiverse/harbor
To use from Python, install using pip:
pip install pulumiverse-harbor
To use from Go, use go get to grab the latest version of the library:
go get github.com/pulumiverse/pulumi-harbor/sdk/v3
To use from .NET, install using dotnet add package:
dotnet add package Pulumiverse.Harbor
The following configuration points are available for the harbor provider:
harbor:url - (Required) The url of the harbor.harbor:username - (Required) The username to be used to access harbor.harbor:password - (Required) The password to be used to access harbor.harbor:insecure - (Optional) Choose to ignore certificate errorsharbor:apiVersion - (Optional) Choose which version of the api you would like to use 1 or 2. Default is 2.For detailed reference documentation, please visit the Pulumi registry.
FAQs
A Pulumi package for creating and managing Harbor resources.
We found that @pulumiverse/harbor demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.

Research
/Security News
We spotted a wave of auto-generated “elf-*” npm packages published every two minutes from new accounts, with simple malware variants and early takedowns underway.

Security News
TypeScript 6.0 will be the last JavaScript-based major release, as the project shifts to the TypeScript 7 native toolchain with major build speedups.