Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
hubot-slack-auto-reply
Advanced tools
A script that encourages people to do more than just greet you
One of my pet peeves with Slack (and other IM platforms) is when somebody needs something from you, but they just say "Hello" (Or "Hi", or "Hey Lenny", etc) and leave it at that. In order to have effective async communication, people should write our their whole query in one shot.
This script implements an auto-responder that encourages people to do more than just greet you.
If a standard greeting is detected, with no follow up within a minute, the bot will reply prompting the user to add more information.
(If either party writes additional messages within the allowed timeframe, the auto-response is canceled)
See src/slack-auto-reply.js
for full documentation.
In hubot project repo, run:
npm install hubot-slack-auto-reply --save
Then add hubot-slack-auto-reply to your external-scripts.json
:
[
"hubot-slack-auto-reply"
]
user1>> hi
<one minute later>
hubot>> Hi! 👋 I'm an auto-responder. It's nice to say hello, but it's better to ask your full question in one shot.
FAQs
A script that encourages people to do more than just greet you
The npm package hubot-slack-auto-reply receives a total of 0 weekly downloads. As such, hubot-slack-auto-reply popularity was classified as not popular.
We found that hubot-slack-auto-reply demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.