Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
@travetto/boot
Advanced tools
Install: primary
$ npm install @travetto/boot
Boot is basic environment awareness coupled with typescript bootstrapping for travetto
apps and libraries. It has support for the following key areas:
The functionality we support for testing and retrieving environment information:
hasProfile(p: string): boolean;
- Test whether or not a profile is active.isTrue(key: string): boolean;
- Test whether or not an environment flag is set and is trueisFalse(key: string): boolean;
- Test whether or not an environment flag is set and is falseget(key: string, def?: string): string;
- Retrieve an environmental value with a potential defaultgetInt(key: string, def?: number): number;
- Retrieve an environmental value as a numbergetList(key: string): string[];
- Retrieve an environmental value as a listThe framework uses a file cache to support it's compilation activities for performance. This cache is also leveraged by other modules to support storing of complex calculations. AppCache
is the cache that is used specific to the framework, and is an instance of FileCache
. FileCache
is the generic structure for supporting a file cache that invalidates on modification/creation changse.
The class organization looks like:
class FileCache {
constructor(cwd: string, cacheDir?: string);
init(): void;
writeEntry(full: string, contents: string | Buffer): void;
readEntry(full: string): string;
removeExpiredEntry(full: string, force?: boolean): void;
removeEntry(full: string): void;
hasEntry(full: string): boolean;
statEntry(full: string): fs.Stats;
clear(): void;
}
Everything is based on absolute paths being passed in, and translated into cache specific files.
This functionality allows the program to opt in the typescript compiler. This allows for run-time compilation of typescript files.
FsUtil
provides some high level functionality (like recursive directory delete).
FAQs
Bootstrapping and common utilities for travetto applications.
We found that @travetto/boot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.