
Security News
Feross on the 10 Minutes or Less Podcast: Nobody Reads the Code
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.
cozy-data-system
Advanced tools
Little API that act as a middleware between Cozy Platform applications and data sent to the database, to the indexer and to the file system. It manages application permissions and provide helpers to make Cozy app development easier.
To set it up inside your cozy instance:
# Get cozy monitor
npm install cozy-monitor -g
cozy-monitor install data-system
You can contribute to the Cozy Data System in many ways:
Install CouchDB (>= 1.2.0), NodeJS (>= 0.10.0) then:
git clone git://github.com/cozy/cozy-data-system.git
cd cozy-data-system
# Load dependencies
npm install
Once datasystem is installed, run it with:
npm start # performs a node build/server.js
Or you can start it in dev mode with:
INDEXES_PATH="../search-indexes" coffee server.coffee
Run tests with following commmand
cake tests
cake tests
cake check-build
cake build
You can also use the provided hook:
cp pre-push .git/hooks/
The cake coverage command requires a bit of explanation. To achieve a proper code coverage, all CouchDB requests must be written in full javascript, otherwise the tests cannot work (since the coffee source is compiled with a special version).
Cozy Data System is developed by Cozy Cloud and distributed under the AGPL v3 license.

Cozy is a platform that brings all your web services in the same private space. With it, your web apps and your devices can share data easily, providing you with a new experience. You can install Cozy on your own hardware where no one profiles you.
You can reach the Cozy Community by:
FAQs
Data-layer between cozy applications and persistence systems
We found that cozy-data-system demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.

Research
/Security News
Campaign of 108 extensions harvests identities, steals sessions, and adds backdoors to browsers, all tied to the same C2 infrastructure.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.