
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
An isomorphic JavaScript library for creating web apps.
Named for Hans
Gruber is a collection of modules for creating isomorphic JavaScript applications, that means web-standards JavaScript on the front- and back-end. It's a bet that web-standards aren't going to change, so our apps don't break in the future. There's also a hope that WinterTG works some stuff out. (Previously WinterCG, which is a good step!)
Gruber acknowledges that web-standards don't do everything we want (at least yet!) and that they aren't implemented properly everywhere either. For this reason, the core of Gruber is agnostic and attempts to make sensible building blocks on top of them. Then there are helpers for using specific runtimes and modules that build around those common primitives.
Gruber itself is a library and can be used however you like. The rest are patterns which you can apply if you like. Patterns are ways of structuring your code if you don't already have opinions on the matter. They also help to explain why Gruber is made in the way it is.
There is a lot not in Gruber too. By design it tries to be as minimal as possible. For examples, there is a development CORs implementation but a production app should be run behind a reverse proxy and that can do those things for you.
I've spent the past few years working on JavaScript backends and nothing has really stuck with me. There have been lots of nice ideas along the way but no one solution ever felt like home. It always felt like starting from scratch for each project.
Some of the apps I've made:
Many frameworks expect you to be making the next big platform with millions of users, I don't expect this to be true and would prefer to keep things as simple as possible for the projects I am working on.
I'm also quite wary of going all-in on a big tech company's library or framework, having explored lots of them on smaller projects. The fatigue from breaking changes or deprecations is real, "move fast and break things" sounds great but it creates a lot of maintenance when you work of lots of small projects in small teams.
FAQs
An isomorphic JavaScript library for creating web apps.
The npm package gruber receives a total of 10 weekly downloads. As such, gruber popularity was classified as not popular.
We found that gruber demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.