
Product
Introducing Tier 1 Reachability: Precision CVE Triage for Enterprise Teams
Socket’s new Tier 1 Reachability filters out up to 80% of irrelevant CVEs, so security teams can focus on the vulnerabilities that matter.
An Event Sourcing toolkit for Node.js based on the [Eventide project](https://eventide-project.org) for Ruby.
An Event Sourcing toolkit for Node.js based on the Eventide project for Ruby.
Status: Pre-Release (due to lack of documentation, see Roadmap)
The best way to get started is to dive into the Gearshaft example project.
Use Docker to run Postgres or install Postgres from scratch. The automated tests expect the following defaults which can be overriden:
localhost
5432
(Postgres default)postgres
NInAN5t3kJo8d7I3
You can run Postgres with docker as follows:
docker run --name pg -d -p 5432:5432 -e POSTGRES_PASSWORD=NInAN5t3kJo8d7I3 postgres:12
Terminate Postgres and delete all data as follow:
docker rm -fv pg
Install the Postgres client (psql)
Ubuntu: sudo apt install postgresql-client
Mac: brew install libpq && brew link --force libpq
(Re)create the message store database and user credentials
If you are using the default (compromised) credentials, simply run: npm run recreate
; otherwise, customize the following commands as necessary:
Create the message_store database:
PGHOST=localhost \
PGUSER=postgres \
PGPASSWORD=NInAN5t3kJo8d7I3 \
./gems/bin/evt-pg-recreate-db
Assign the message_store user a password:
PGHOST=localhost \
PGUSER=postgres \
PGPASSWORD=NInAN5t3kJo8d7I3 \
psql -c "alter role message_store with password 'NInAN5t3kJo8d7I3';"
The Test Suite configuration is managed using the rc module. Create a .gearshaft_testsrc
file in the project root directory with the following fields to customize the Postgres connection settings:
{
"db": {
"host": "some-host-name",
"user": "some-pg-user",
"password": "some-pg-pass",
"database": "some-pg-database"
}
}
The project is named after the concept of a physical gearshaft: a machine engineered to precisely actuate components.
Gearshaft builds on the hard-fought design learnings of the Eventide's Ruby implemention. The module boundaries and many test-cases have Eventide equivalents making the Eventide Documentation a great resource for getting started. Gearshaft relies on the Message DB for Postgres schema and functions.
FAQs
An Event Sourcing toolkit for Node.js based on the [Eventide project](https://eventide-project.org) for Ruby.
We found that gearshaft demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket’s new Tier 1 Reachability filters out up to 80% of irrelevant CVEs, so security teams can focus on the vulnerabilities that matter.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.