
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
key-collection
Advanced tools
A hyperdb-based collection of 32-byte keys.
npm i -g key-collection
key-collection sync <location>
Where <location> is the path of a yaml file structured like example.yml.
This will first sync the database with the yaml file, deleting and adding entries as required, and then seed the database.
const KeyCollection = require('key-collection')
const Corestore = require('corestore')
const Hyperswarm = require('hyperswarm')
const IdEnc = require('hypercore-id-encoding')
async function main () {
const key = IdEnc.decode('your key here') // Fill in with the public key of the collection db, as printed in the previous step
const store = new Corestore('key-collection-store')
const core = store.get({ key })
const keyColl = new KeyCollection(core)
await keyColl.ready()
const swarm = new Hyperswarm()
swarm.on('connection', (conn) => {
console.log('connection opened')
store.replicate(conn)
})
swarm.join(keyColl.discoveryKey, { client: true, server: false })
console.log(await keyColl.toMap()) // Note: will print an empty map the first time it runs, because it hasn't synced with the server yet
}
main()
FAQs
Hyperdb-based collection of 32-byte keys
The npm package key-collection receives a total of 7 weekly downloads. As such, key-collection popularity was classified as not popular.
We found that key-collection demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.