@webboxes/plugin-hub
Advanced tools
Saving, sharing and pulling Cordis plugins: dotted plugin names, the source argument, deterministic packing with sha512, the local plugin store, and the pull pipeline. Host-independent: no Cordis, DSH or surface dependencies.
Saving, sharing and pulling Cordis plugins, with no Cordis, DSH or surface dependency (spec 044, specs/044-extension-persistence-and-registries/lifecycle.md).
parsePluginName, pluginNameOf): @owner/accounting-app-aurora.sidebar.date-filter; the dots are the levels of the author's tree.parsePluginSource): store:, github:owner/repo[@version], npm:, a .tgz file or https URL, a folder, or a bare name. A raw git address is refused.packFolder, writeTarball, readTarball, integrityOf): npm's file rules and layout, written deterministically (the same files give the same sha512 on every system), with no npm needed.PluginStore, savePlugin): every saved or pulled version as a tarball plus a record; a version is kept once.pullPlugin): resolve, fetch, check the sha512, read the manifest, store. Installing is the app's job.FAQs
Saving, sharing and pulling Cordis plugins: dotted plugin names, the source argument, deterministic packing with sha512, the local plugin store, and the pull pipeline. Host-independent: no Cordis, DSH or surface dependencies.
The npm package @webboxes/plugin-hub receives a total of 736 weekly downloads. As such, @webboxes/plugin-hub popularity was classified as not popular.
We found that @webboxes/plugin-hub demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Threat Research
/Security News
Compromised maintainer accounts pushed malicious @ethersphere/bee-js 13.3.0 and Swarm Desktop 0.56.2, reusing SleepyDuck’s Ethereum-addressed C2 infrastructure.
Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.