
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
homebridge-flair
Advanced tools
Flair Smart Vent plug-in for Homebridge using the Flair API.
npm install -g homebridge
npm install -g homebridge-flair
config.json
snippet below.Configuration sample (edit ~/.homebridge/config.json
):
{
"platforms": [
{
"clientId": "client_id",
"clientSecret": "client_secret",
"username": "user",
"password": "pass",
"pollInterval": 60,
"platform": "Flair",
"ventAccessoryType": "windowCovering"
}
]
}
In order to use this plugin you will need to obtain a client id and client secret from Flair.
Follow the instructions here.
Specifically you need to:
You will use the client id and secret they send you in the config block above.
When you use Pucks with your setup the pucks will appear in the app as a Thermostat. If you turn those thermostats off it will put the Flair system into Manual mode. If you turn the thermostat to any other setting it will set your system to Flair's Auto mode.
You can specify how vent accessories are shown in HomeKit with the ventAccessoryType
property.
windowCovering
- Window Covering
fan
- Fan
airPurifier
- Air Purifier
Commits should be formatted as type(scope): message
The following types are allowed:
Type | Description |
---|---|
feat | A new feature |
fix | A bug fix |
docs | Documentation only changes |
style | Changes that do not affect the meaning of the code (white-space, formatting,missing semi-colons, etc) |
refactor | A code change that neither fixes a bug nor adds a feature |
perf | A code change that improves performance |
test | Adding missing or correcting existing tests |
chore | Changes to the build process or auxiliary tools and libraries such as documentation generation |
A new version is released when a merge or push to main
occurs.
We use the rules at default-release-rules.js as our guide to when a series of commits should create a release.
FAQs
Brings the flair smart vents into homekit
We found that homebridge-flair demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.