
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
A persistence layer for Haze, an otherwise in-memory document/object cache.
AOF stands for "append-only file". A record is appended to the AOF when a document is created, updated, or destroyed. Append-only files are cheaper to write data to than writing to random seek-points in a file.
The AOF can be loaded and processed to recreate the on-disk collection in main memory. This would be done at app startup for instance.
Your first thought might be that if the same document is updated many times, the AOF file will grow proportionally larger and will maintain older versions of documents. However, disk space is plentiful and inexpensive. Also, having older versions maintains an audit trail of sorts. We might add a rewriter at some point.
npm install haze-aof
var haze = require('haze')
var hazeAOF = require('haze-aof')
hazeAOF.load('data.aof', function (errors) {
if (errors) {
console.error(errors)
} else {
startApp()
}
})
function startApp() {
haze.createDocument('Things', {
meatball: true
})
}
Brian Hammond brian@fictorial.com
MIT
FAQs
Append-only file storage adapter for the Haze document cache
We found that haze-aof demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.