
Product
Announcing Socket Fix 2.0
Socket Fix 2.0 brings targeted CVE remediation, smarter upgrade planning, and broader ecosystem support to help developers get to zero alerts.
MD5Dumper is a tool that:
MD5Dumper aims to automatise file system synchronization between distinct ends. Intended specially for auto-patch servers.
Due to the way auto-patch servers interact with clients, data traffic on each check is really important to optimize. MD5Dumper attempts to minimize the size of data interchanged between those checks.
An Fsmap is a canonical representation of a directory. It is generated by recursively traversing a directory in a sorted way and creating MD5 hashes of every file's content + file's relative path.
declare type Fsmap = FsmapEntry[];
declare type FsmapEntry = {
index: number; // Index to ensure traverse order
path?: string; // Relative file system path
md5: string; // h(relativePath + content)
};
./target
for this example)./target
dir and store it under ./autopatcher/build.fsmap
. This file will be used to deserialize on the server side, client won't need this one../target
and store it under ./autopatcher/build.min.fsmap
./target
and store it under ./autopatcher/summary.md5
build.min.fsmap
and summary.md5
. (They will need them to perform checksum :p)summary.md5
from the server and compare with local fsmap's summary.build.min.fsmap
from the server.build.min.fsmap
and local fsmap. The diff functionality of MD5Dumper will yield "invalid local files" and "missing file indices".FAQs
A tool to dump versions for easy delta data interchange.
We found that md5dumper demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket Fix 2.0 brings targeted CVE remediation, smarter upgrade planning, and broader ecosystem support to help developers get to zero alerts.
Security News
Socket CEO Feross Aboukhadijeh joins Risky Business Weekly to unpack recent npm phishing attacks, their limited impact, and the risks if attackers get smarter.
Product
Socket’s new Tier 1 Reachability filters out up to 80% of irrelevant CVEs, so security teams can focus on the vulnerabilities that matter.