
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
crossmon-collect
Advanced tools
Crossmon-collect is the gattering service for crossmon-server. Crossmon-collect starts periodically the collecting modules and send the collected datas to the crossmon-server.
This service only works on conclusion with at least one collecting module like crossmon-cpu.
A sample configuration file can be found in the module directory. At the startup crossmon-collect searches for a configuration file. This is the search order:
You can install the collecting service simply by running:
npm install crossmon-collect -g
You have to set the IP-Address or hostname and the port of the storage service (crossmon-server).
crossmon-collect setup server value 127.0.0.1
crossmon-collect setup port value 7654
At minimum you will need one collecting module like crossmon-cpu.
npm install crossmon-cpu -g
After the module installation you can set up the service. At first you must enable the module.
crossmon-collect enable crossmon-cpu
After that you can setup the module by running.
crossmon-collect setup crossmon-cpu
Depending on the installed module the setup will guide you thru the configuration.
You can start the service with.
crossmon-collect start
You can stop the service with.
crossmon-collect stop
You can restart the service with.
crossmon-collect restart
The following command shows you the options for crossmon-collect.
crossmon-collect --help
FAQs
Gattering service for crossmon-server
We found that crossmon-collect demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.