
Security News
PodRocket Podcast: Inside the Recent npm Supply Chain Attacks
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
go-libp2p-dep
Advanced tools
Install the latest go-libp2p binary from IPFS public gateway.
npm install go-libp2p-dep --save
Warning: The binary gets put in the go-libp2p
folder inside the module folder.
Can be specified in package.json
with a field go-libp2p.version
, eg:
"go-libp2p": {
"version": "v6.0.30"
},
When a new go-libp2p
version is released, it is necessary to create binaries for linux, windows and mac os. After this, those binaries should be added to ipfs and the versions.js
file updated accordingly.
For generating binaries for all the platforms we have been using gox.
An example flow for version 0.1.0:
go-libp2p-daemon
$ # in your GOPATH (for example inside go/src/github.com/libp2p)
$ git clone https://github.com/libp2p/go-libp2p-daemon
$ cd go-libp2p-daemon
$ git checkout <release tag, e.g. v0.0.1>
$ go get ./...
$ go install ./...
$ gox -osarch="linux/amd64 darwin/amd64 windows/amd64" github.com/libp2p/go-libp2p-daemon/p2pd
$ mv p2pd_linux_amd64 p2pd
$ mv p2pd_darwin_amd64 p2pd
$ mv p2pd_windows_amd64.exe p2pd.exe
$ tar -cvzf go-libp2p-0.1.0-linux.tar.gz p2pd
$ tar -cvzf go-libp2p-0.1.0-mac.tar.gz p2pd
$ zip go-libp2p-0.1.0-windows.zip p2pd.exe
$ ipfs add go-libp2p-0.1.0-linux.tar.gz
$ ipfs add go-libp2p-0.1.0-mac.tar.gz
$ ipfs add go-libp2p-0.1.0-windows.zip
FAQs
Install the latest go-libp2p binary
The npm package go-libp2p-dep receives a total of 0 weekly downloads. As such, go-libp2p-dep popularity was classified as not popular.
We found that go-libp2p-dep demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.