Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
cmbf-device
Advanced tools
CMBF plugin used to communicate with a connected device. Reuse websocket channels and supports offline data caching
The device plugin provides a high-level interface to manage data storage on specific devices. Our goal is to propagate useful data on the device to avoid roundtrips and increase application performance. The propagation is controlled by each plugin, based on its needs. The device plugin will manage the connection with the device, through the websocket plugin.
Some plugins might want to store and sync data on all devices. This is achieved by sending subscriptions to the device for specific collection subset. When the device is connected, the plugin will make sure that the subscription is in sync and forward any incoming changes (like Meteor DDP).
createSubscription syncSubscription removeSubscription
The query is provided, with certain fields like deviceId, owner, userId being available to scope the collection.
The subscription can be applied to specific devices only by geolocation, by country, language, account level, etc.
FAQs
CMBF plugin used to communicate with a connected device. Reuse websocket channels and supports offline data caching
The npm package cmbf-device receives a total of 2 weekly downloads. As such, cmbf-device popularity was classified as not popular.
We found that cmbf-device demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.