
Research
PyPI Package Impersonates SymPy to Deliver Cryptomining Malware
Malicious PyPI package sympy-dev targets SymPy users, a Python symbolic math library with 85 million monthly downloads.
dat-http-replicator
Advanced tools
npm install dat-http-replicator
On a server
var replicator = require('dat-http-replicator')
var http = require('http')
var server = http.createServer(function (req, res) {
var progress = replicator.server(datGraphInstance, req, res)
if (!progress) return
progress.on('pull', function () {
console.log('server pulled', progress.pulled)
})
progress.on('push', function () {
console.log('server pushed', progress.pushed)
})
})
server.listen(9000)
On a client
var replicator = require('dat-http-replicator')
var progress = replicator(datGraphInstance, 'http://localhost:9000')
progress.on('pull', function () {
console.log('client pulled', progress.pulled)
})
progress.on('push', function () {
console.log('client pushed', progress.pushed)
})
progress.on('end', function () {
console.log('done replicating')
})
progress.on('error', function (err) {
console.log('error!', err)
})
progress = replicator.server(datGraph, req, res, [opts], [cb])Setup a server http handler. Options include:
{
readonly: true, // do not allow pushes
writeonly: true // do not allow pulls
}
Note that the progress monitor will be null if this is an endpoint
without progress monitoring support.
progress = replicator.client(datGraph, url, [opts], [cb])Make a replication request. Options include:
{
mode: 'push' | 'pull' | 'sync' // defaults to sync
}
The progress monitor returned will emit push and pull when you send a graph node
or receive a graph node. The progress events look like this
{
transferred: nodesTransferredSoFar,
length: totalNumberOfNodesToTransfer
}
The latest progress event call also be accessed at progress.pushed and progress.pulled
FAQs
push/pull a dat repo over a HTTP REST API
The npm package dat-http-replicator receives a total of 0 weekly downloads. As such, dat-http-replicator popularity was classified as not popular.
We found that dat-http-replicator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious PyPI package sympy-dev targets SymPy users, a Python symbolic math library with 85 million monthly downloads.

Product
Create and share saved alert views with custom tabs on the org alerts page, making it easier for teams to return to consistent, named filter sets.

Product
Socket’s Rust and Cargo support is now generally available, providing dependency analysis and supply chain visibility for Rust projects.