Product
Socket Now Supports uv.lock Files
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
mock-ipfs-pinning-service
Advanced tools
Implementation of in-memory IPFS Pinning Service API for testing purposes.
npm i -D mock-ipfs-pinning-service @types/express
You can start the mock server from the command line:
npx mock-ipfs-pinning-service --port 3000 --token secret
If token is not passed it will not preform authentification.
const { setup } = require('mock-ipfs-pinning-service')
const port = 3005
const main = async () => {
/**
* @type {import('express').Application}
*/
const service = await setup({ token: 'secret' })
const server = service.listen(port, () => {
console.log(`server running on port ${port}`)
})
const cleanupEvents = ['beforeExit', 'SIGTERM', 'SIGINT', 'SIGHUP']
// Express server cleanup handling.
const cleanup = () => {
// To prevent duplicated cleanup, remove the process listeners on cleanup
cleanupEvents.forEach((event) => process.off(event, cleanup))
server.close((err) => {
if (err) {
console.error(err)
return
}
console.log(`server stopped listening on port ${port}`)
})
}
// close the server when your process exits
cleanupEvents.forEach((event) => process.on(event, cleanup))
}
State of the pins is exposed via service.locals.state
which you can monkeypatch or replace. Each new request will be served based on that value. All requests perform that perform state updates do them in immutable style and swap the whole value, in other words references are guaranteed to not mutate.
You can see the status of the server and test individual functions from the SwaggerUI by navigating to http://localhost:${port}/docs/
, switching Server to /
and then entering access token under Authorize button.
Pass:
--loglevel error
to only print errors--loglevel info
to print each JSON request and response (default on CLI)--loglevel debug
to see low level OpenAPI validation detailsPinStatus
responseBy default the mock service will respond with PinStatus.status="queued"
.
This means ipfs pin remote add
will hang forever, unless --background
is passed, because it will wait for status to change to pinned
or failed
.
It is possible to overide this behavior per pin request by prefixing Pin.name
with ${status}-
, for example:
queued-test0
→ PinStatus.status="queued"
→ pin remote add
hangs (needs --background
)pinning-test1
→ PinStatus.status="pinning"
→ pin remote add
hangs (needs --background
)pinned-test2
→ PinStatus.status="pinned"
→ pin remote add
responds instantlyfailed-test3
→ PinStatus.status="failed"
→ pin remote add
responds instantlyipfs pin remote
)One can use this mock service with client included in go-ipfs to debug its behavior:
// start mock service
$ npx mock-ipfs-pinning-service --port 5000 --token secret --loglevel info
// then in other console
$ ipfs pin remote service add mock "http://127.0.0.1:5000" secret
$ ipfs pin remote service ls --stat
mock http://127.0.0.1:5000 0/0/0/1
The first console will show what happened on the wire:
Request: GET /pins?limit=1&status=queued headers[host=127.0.0.1:5000;user-agent=go-pinning-service-http-client;accept=application/json;authorization=Bearer secret;accept-encoding=gzip] at Fri Apr 23 2021 19:58:49 GMT+0200, IP: ::ffff:127.0.0.1, User Agent: go-pinning-service-http-client
Response Body:
{
"count": 0,
"results": []
}
Response: 200 3.183 ms headers[x-powered-by=Express;access-control-allow-origin=*;content-type=application/json; charset=utf-8;content-length=24;etag=W/"18-sS5FLbfK694W6H4gsKxYsIoy1Pk"]
FAQs
mock ipfs pinning service
We found that mock-ipfs-pinning-service demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.