
Research
/Security News
Popular Tinycolor npm Package Compromised in Supply Chain Attack Affecting 40+ Packages
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
bap-junglebus
Advanced tools
BAP transaction indexer for JungleBus
BAP-junglebus is a JungleBus compatible Bitcoin Attestation Protocol indexer. It scans all BAP transactions and processes them into a global BAP state using GorillaPool's JungleBus.
npm install -g bap-junglebus
Set the environment variables. You must at least set a JungleBus subscription.
export BAP_SUBSCRIPTION_ID=""
And optionally overwrite the defaults for the database:
export BAP_MONGO_URL="mongodb://localhost:27017/bap"
Indexing BAP blocks can now be done by running
bap-junglebus
The arguments to the bap-junglebus cli are:
arg | Description |
---|---|
-s <subscription id> | JungleBus subscription ID |
git clone https://github.com/icellan/bap-junglebus.git
BAP-junglebus can run either with settings from a config file (config.json
) or from environment variables.
config.json
{
"subscriptionId": "...",
"mongoUrl": "mongodb://..."
}
environment
export BAP_SUBSCRIPTION_ID="..."
export BAP_MONGO_URL="mongo://..."
To run the indexer:
./start.sh
yarn test
or
yarn testwatch
npm install bap-junglebus
or
yarn add bap-junglebus
Make sure you set the environment variables before running any scripts:
export BAP_SUBSCRIPTION_ID = '<junglebus subscription id>';
export BAP_MONGO_URL = 'mongodb://localhost:27017/bap';
Index all BAP transactions (also from mempool):
import { watchBAPTransactions } from 'bap-junglebus/src/bap';
(async function() {
await watchBAPTransactions();
})();
Make sure babel is set up properly or that es6 is supported by your own package.
FAQs
BAP indexer to MongoDB using JungleBus
We found that bap-junglebus demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
Security News
pnpm's new minimumReleaseAge setting delays package updates to prevent supply chain attacks, with other tools like Taze and NCU following suit.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.