
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@red-hat-developer-hub/backstage-plugin-lightspeed
Advanced tools
The Lightspeed plugin enables you to interact with any LLM server running a model with OpenAI's API compatibility.
Note
The Lightspeed plugin has support for the permission framework.
rbac-policy.csv
:p, role:default/team_a, lightspeed.conversations.read, read, allow
p, role:default/team_a, lightspeed.conversations.create, create, allow
p, role:default/team_a, lightspeed.conversations.delete, delete, allow
g, user:default/<your-user-name>, role:default/team_a
You can specify the path to this configuration file in your application configuration:
permission:
enabled: true
rbac:
policies-csv-file: /some/path/rbac-policy.csv
policyFileReload: true
Install the Lightspeed plugin using the following command:
yarn workspace app add @red-hat-developer-hub/backstage-plugin-lightspeed
Add a new nav item Lightspeed in App packages/app/src/App.tsx
:
/* highlight-add-next-line */ import { LightspeedPage } from '@red-hat-developer-hub/backstage-plugin-lightspeed';
<Route path="/lightspeed" element={<LightspeedPage />} />;
Enable Lightspeed page in packages/app/src/components/Root/Root.tsx
:
/* highlight-add-next-line */ import { LightspeedIcon } from '@red-hat-developer-hub/backstage-plugin-lightspeed';
<SidebarItem
icon={LightspeedIcon as IconComponent}
to="lightspeed"
text="Lightspeed"
/>;
Lightspeed is a front-end plugin that enables you to interact with any LLM server running a model with OpenAI's API compatibility.
global:
dynamic:
includes:
- dynamic-plugins.default.yaml
plugins:
- package: '@red-hat-developer-hub/backstage-plugin-lightspeed@0.1.2'
integrity: >-
sha512-bCKETjVhjZFLx7ImSFcptA3yvwJhFLFTFhMo/LvdVc0K5E76/SpEEkYBPup4aEQMivZBJKn0iVQFBuduChCDpA==
disabled: false
pluginConfig:
dynamicPlugins:
frontend:
red-hat-developer-hub.backstage-plugin-lightspeed:
appIcons:
- name: LightspeedIcon
module: LightspeedPlugin
importName: LightspeedIcon
dynamicRoutes:
- path: /lightspeed
importName: LightspeedPage
module: LightspeedPlugin
menuItem:
icon: LightspeedIcon
text: Lightspeed
app-config.yaml
lightspeed:
servers:
- id: <server_id>
url: <server_URL>
token: <api_key>
Follow the below steps -
yarn install
yarn tsc
yarn build
yarn export-dynamic
To Package the plugin, run the below commands.
pkg=../plugins/lightspeed
archive=$(npm pack $pkg)
tar -xzf "$archive" && rm "$archive"
mv package $(echo $archive | sed -e 's:\.tgz$::')
app-config.yaml
or app-config.local.yaml
file.
lightspeed:
servers:
- id: <server id>
url: <serverURL>
token: <api key> # dummy token
dynamicPlugins:
frontend:
red-hat-developer-hub.backstage-plugin-lightspeed:
appIcons:
- name: LightspeedIcon
module: LightspeedPlugin
importName: LightspeedIcon
dynamicRoutes:
- path: /lightspeed
importName: LightspeedPage
module: LightspeedPlugin
menuItem:
icon: LightspeedIcon
text: Lightspeed
FAQs
Unknown package
We found that @red-hat-developer-hub/backstage-plugin-lightspeed demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.