
Security News
Google’s OSV Fix Just Added 500+ New Advisories — All Thanks to One Small Policy Change
A data handling bug in OSV.dev caused disputed CVEs to disappear from vulnerability feeds until a recent fix restored over 500 advisories.
@ucp-npm/sophtron-adapter
Advanced tools
This is the adapter that makes it possible to connect with Sophtron via the Universal Connect Widget.
This package is meant to be used with the Universal Connect Widget. If you have forked the UCW project, you can install it as a dependency of the widget.
Navigate to your forked project and, from the root of the project, run:
npm i @ucp-npm/sophtron-adapter --workspace apps/server
Once you have the npm package installed, you can set up the ucw to use it.
In the ./apps/server/adapterSetup.ts
file, do the following:
Import getSophtronAdapterMapObject
from the Sophtron adapter package:
import { getSophtronAdapterMapObject } from "@ucp-npm/sophtron-adapter";
Import the logger:
import * as logger from "./infra/logger";
Next, look for the line that starts with export const adapterMap = {
, and add the adapter map as follows:
const sophtronAdapterMapObject = getSophtronAdapterMapObject({
logClient: logger,
aggregatorCredentials: {
clientId: config.SOPHTRON_API_USER_ID,
secret: config.SOPHTRON_API_USER_SECRET,
},
envConfig: {
HOSTURL: config.HOST_URL,
},
});
export const adapterMap = {
...sophtronAdapterMapObject,
...testAdapterMapObject,
};
The logClient
dependency is provided by the Universal Connect Widget.
https://www.npmjs.com/package/@ucp-npm/sophtron-adapter
See https://universalconnectproject.org/ for more information.
FAQs
Sophtron Adapter for the Universal Connect Widget
The npm package @ucp-npm/sophtron-adapter receives a total of 13 weekly downloads. As such, @ucp-npm/sophtron-adapter popularity was classified as not popular.
We found that @ucp-npm/sophtron-adapter demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A data handling bug in OSV.dev caused disputed CVEs to disappear from vulnerability feeds until a recent fix restored over 500 advisories.
Research
/Security News
175 malicious npm packages (26k+ downloads) used unpkg CDN to host redirect scripts for a credential-phishing campaign targeting 135+ organizations worldwide.
Security News
Python 3.14 adds template strings, deferred annotations, and subinterpreters, plus free-threaded mode, an experimental JIT, and Sigstore verification.