
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@travetto/boot
Advanced tools
Install: primary
$ npm install @travetto/boot
Boot is basic environment awareness coupled with typescript bootstrapping for travetto
apps and libraries. It has support for the following key areas:
The functionality we support for testing and retrieving environment information:
isTrue(key: string): boolean;
- Test whether or not an environment flag is set and is trueisFalse(key: string): boolean;
- Test whether or not an environment flag is set and is falseisSet(key:string): boolean;
- Test whether or not an environment value is set (excludes: null
, ''
, and undefined
)get(key: string, def?: string): string;
- Retrieve an environmental value with a potential defaultgetInt(key: string, def?: number): number;
- Retrieve an environmental value as a numbergetList(key: string): string[];
- Retrieve an environmental value as a listgetTime(key: string, def: number):number
- Reads an environment variable as milliseconds, with support for s
, m
, and h
suffixes to provide succinct time units.The framework uses a file cache to support it's compilation activities for performance. This cache is also leveraged by other modules to support storing of complex calculations. AppCache
is the cache that is used specific to the framework, and is an instance of FileCache
. FileCache
is the generic structure for supporting a file cache that invalidates on modification/creation changes.
The class organization looks like:
class FileCache {
constructor(cwd: string, cacheDir?: string);
init(): void;
writeEntry(full: string, contents: string | Buffer): void;
readEntry(full: string): string;
removeExpiredEntry(full: string, force?: boolean): void;
removeEntry(full: string): void;
hasEntry(full: string): boolean;
statEntry(full: string): fs.Stats;
clear(): void;
}
Everything is based on absolute paths being passed in, and translated into cache specific files.
This functionality allows the program to opt in the typescript compiler. This allows for run-time compilation of typescript files.
FsUtil
provides some high level functionality (like recursive directory delete).
ScanFs
provides a breadth-first search through the file system with the ability to track and collect files via patterns.
Just like [child_process
], the ExecUtil
exposes spawn
and fork
. These are generally wrappers around the underlying functionality. In addition to the base functionality, each of those functions is converted to a Promise
structure, that throws an error on an non-zero return status.
A simple example would be
Code: Running a directory listing via ls
async function executeListing() {
const { result } = ExecUtil.spawn('ls');
await result;
}
As you can see, the call returns not only the child process information, but the Promise
to wait for. Additionally, some common patterns are provided for the default construction of the child process. In addition to the standard options for running child processes, the module also supports:
timeout
as the number of milliseconds the process can run before terminating and throwing an errorquiet
which suppresses all stdout/stderr outputstdin
as a string, buffer or stream to provide input to the program you are running;timeoutKill
allows for registering functionality to execute when a process is force killed by timeoutThe StreamUtil
class provides basic stream utilities for use within the framework:
toBuffer(src: Readable | Buffer | string): Promise<Buffer>
for converting a stream/buffer/filepath to a Buffer.toReadable(src: Readable | Buffer | string):Promise<Readable>
for converting a stream/buffer/filepath to a ReadablewriteToFile(src: Readable, out: string):Promise<void>
will stream a readable into a file path, and wait for completion.waitForCompletion(src: Readable, finish:()=>Promise<any>)
will ensure the stream remains open until the promise finish produces is satisfied.FAQs
Bootstrapping and common utilities for travetto applications.
The npm package @travetto/boot receives a total of 3 weekly downloads. As such, @travetto/boot popularity was classified as not popular.
We found that @travetto/boot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.