
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
@smithy/eventstream-serde-config-resolver
Advanced tools
Provides event-stream serialization and deserialization for universal JavaScript environments. It performs the serde work that configuration resolution supports, rather than focusing on filling in UTF-8 configuration defaults.
Provides lower-level event-stream message encoding and decoding, including handling the event-stream wire format. It works at a more protocol-focused level than a package that resolves UTF-8 serde configuration.
Provides event-stream serde support tailored to Node.js. Compared with a configuration resolver, it supplies runtime-specific serialization and deserialization functionality rather than only resolving the UTF-8 functions used by serde.
Provides event-stream serde support tailored to browsers. It is a runtime-specific serde implementation, while a configuration resolver handles selecting or defaulting the UTF-8 functions that serde uses.
FAQs
Unknown package
The npm package @smithy/eventstream-serde-config-resolver receives a total of 24,024,389 weekly downloads. As such, @smithy/eventstream-serde-config-resolver popularity was classified as popular.
We found that @smithy/eventstream-serde-config-resolver demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.