Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
append-only-log
Advanced tools
Abstract interface for an append-only log.
Like abstract-blob-store, but for append-only logs.
Mad science work-in-progress! :dragon_face:
To use the test suite from this module, use require('append-only-log/tests')
.
You'll have to implement a setup and teardown function:
var common = {
setup: function(t, cb) {
// setup takes a tap/tape compatible test instance in and a callback
// this method should construct a new blob store instance and pass it to the callback:
var log = createMyLog()
cb(null, log)
},
teardown: function(t, log, blob, cb) {
// teardown takes in the test instance, as well as the log instance
// you can use the log to clean up its data, e.g.
if (log) {
var stream = log.createReadStream()
stream.on('data', function (entry) {
entry.cleanup()
})
stream.on('end', cb)
} else cb()
// be sure to call cb() when you are done with teardown
}
}
To run the tests simply pass your test module (tap or tape or any other compatible modules are supported) and your common methods in:
var appendOnlyLogTests = require('append-only-log/tests')
appendOnlyLogTests(test, common)
A valid append-only log should implement the following APIs. There is a
reference in-memory implementation available at index.js
in this repo.
Appends value
to the end of the log. If a function cb
is given, it will be
called asynchronously as function (err, seq)
. seq
is the sequence number of
the appended entry.
Gets the value with sequence number seq
from the log asynchronously. cb
has
the signature function (err, value)
.
Returns a Readable stream of values in the append-only log, starting from the
most recently appended. Some implementations may accept opts.reverse
for
reversed entries, but this is not guaranteed.
With npm installed, run
$ npm install append-only-log
append-only-log
was inspired by
abstract-blob-store.
ISC
FAQs
append only log interface
We found that append-only-log demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.