
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
@vltpkg/xdg
Advanced tools
Get appropriate data, cache, and config directories following the XDG spec, namespaced to a specific app-name subfolder.
import { XDG } from '@vltpkg/xdg'
// instantiate with the name of your thing.
const xdg = new XDG('vlt')
const cachePath = xdg.cache('some-path') // ~/.cache/vlt/some-path
const configFile = xdg.config('vlt.json') // ~/.config/vlt/vlt.json
const dataFolder = xdg.data('blah') // ~/.local/share/vlt/blah
const someState = xdg.state('foobar') // ~/.local/state/vlt/fooobar
FAQs
platform-specific app directories following XDG spec
The npm package @vltpkg/xdg receives a total of 59,458 weekly downloads. As such, @vltpkg/xdg popularity was classified as popular.
We found that @vltpkg/xdg demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.