Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
address-deduplicator-stream
Advanced tools
A stream for deduplicating a stream of address Documents.
A stream that performs address deduplication using the robust OpenVenues deduplicator; note that it must be separately installed and running.
address-deduplicator-stream
exports a single function:
createDeduplicateStream( requestBatchSize, maxLiveRequests, serverUrl )
, which accepts three optional arguments:
requestBatchSize
(default: 100
): The number of addresses to buffer into a
batch before sending it to the deduplicator. The higher the number, the
less time and energy collectively spent in making requests, but the
bigger the memory consumption buildup.maxLiveRequests
(default: 10
): Since the deduper is implemented as a
standalone server and processes data more slowly than the importer feeds
it, the stream needs to rate-limit itself. maxLiveRequests
indicates
the maximum number of unresolved concurrent requests at any time; when
that number is hit, the stream will pause reading until the number of
concurrent requests falls below it.serverUrl
(default: 'http://localhost:5000'
): The HTTP base URL of the address deduplicator server.and returns a Transform
stream, which accepts un-deduplicated addresses and filters out the duplicates; note that
it'll likely be the slowest part of your data pipeline because of all the involved heavy lifting. The addresses
themselves are expected to be pelias/model Document
objects.
FAQs
A stream for deduplicating a stream of address Documents.
We found that address-deduplicator-stream demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.