
Security News
Next.js Patches Critical Middleware Vulnerability (CVE-2025-29927)
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
@reason-native-web/gluten-lwt
Advanced tools
This repo is used for publishing packages to npm that are either unreleased or depend on unreleased packages. This removes the need for resolutions in users' package.json.
This repo is used for publishing packages to npm that are either unreleased or depend on unreleased packages. This removes the need for resolutions in users' package.json.
This example uses
websocketaf
Add the git submodule, it is important that you use the https
version because of the github workflow:
git submodule add https://github.com/anmonteiro/websocketaf.git
Create a websocketaf.json
and whatever else is needed, in websocketaf's case we also need websocketaf-lwt.json
and websocketaf-lwt-unix.json
.
Note: I usually just copy another package that is similar, in this case h1.json
Check the coresponding .opam
file, eg. websocketaf.opam
, websocketaf-lwt.opam
and websocketaf-lwt-unix.opam
for dependencies and add them to the json files accordingly.
Add build instructions under esy
:
"esy": {
"build": "dune build --only-packages=websocketaf --profile=release -j 4 --root=./websocketaf",
"install": "esy-installer #{self.target_dir / 'default' / 'websocketaf.install'}"
}
Add a files
key that points to the folder where it's cloned, in this case : "files": ["websocketaf"],
Update publish.yml
with the added libraries in the topological order. The order is important if a library depends on another library since they will be published in order to be able to build the next.
FAQs
This repo is used for publishing packages to npm that are either unreleased or depend on unreleased packages. This removes the need for resolutions in users' package.json.
The npm package @reason-native-web/gluten-lwt receives a total of 13 weekly downloads. As such, @reason-native-web/gluten-lwt popularity was classified as not popular.
We found that @reason-native-web/gluten-lwt demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
Security News
A survey of 500 cybersecurity pros reveals high pay isn't enough—lack of growth and flexibility is driving attrition and risking organizational security.
Product
Socket, the leader in open source security, is now available on Google Cloud Marketplace for simplified procurement and enhanced protection against supply chain attacks.