
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
_______________________________ / ___ ___ _ _ _ _ ___ \ | | || -_||_'_|| | ||_ -| | | |_|_||___||_,_||___||___| | \_____________________________ / ____ ___ \|
_______________________________
/ ___ ___ _ _ _ _ ___ \
| | || -_||_'_|| | ||_ -| |
| |_|_||___||_,_||___||___| |
\_____________________________ / ____ ___
\| / . \ .-´/ \`-.
\____ \/ \___/ \__
\_`---´___`---´-´
/../..\ /..\..\
require('child_process').spawn
'ed child-processes of
monitor-servers (dnode-clients). monitor-servers connect (and reconnect) to
the nexus-server (dnode-server). the nexus-server is also a
require('child_process').spawn
'ed child-process of a monitor-server -
which itself will connect (and reconnect) to its own child-process.~/.nexus
by default.npm install nexus -g
nexus [-r <remote>] [-c <path to configFile>] [<command> [<options>]]
commands:
version .. print version-number
config .. print config
ls .. list installed packages
install .. install packages
uninstall .. uninstall packages
ps .. list of current running (and crashed) programs
start .. start a program
restart .. restart a running (or max crashed) program
stop .. stop a running program
stopall .. stop all running programs
exec .. execute a command with CWD = ~/.nexus/apps
execscript .. execute a script, defined in a package.json
logs .. access log-files
subscribe .. subscribe to events
server .. start/stop/restart the nexus-server
help .. try `nexus help <command>` for more info
note: ps, restart, stop, stopall, subscribe and `logs clean`
only work with a local or remote running nexus-server.
you can pass a string or an object to the nexus-constructor or use the (-c
)
option with the cli. if you pass a string it will will be require(string)
'ed.
if you dont pass any config-option the nexus-cli will create a
~/.nexus
-directory if it doesnt exist and put all the configs and logs there.
it will try to require('~/.nexus/config.js')
per default.
the default config is (which gets overwritten by the config you pass to nexus):
{ apps : prefix+'/apps' // nexus will install apps into that directory
, tmp : prefix+'/tmp' // apps will be installed here temporarily
, logs : prefix+'/logs' // this is where log-files will be put
, key : null // path to key-file - if set, the nexus-server uses tls
, cert : null // path to cert-file - if set, the nexus-server uses tls
, ca : null // every file in that directory will be read into the ca
, dbs : prefix+'/dbs' // nexus will store information about running processes in
// database-files (one per socket/port). these dbs will be
// used by the `nexus server reboot` command
, socket : prefix+'/socket' // the nexus-server will listen on that UNIX-socket
// local cli and monitor-servers will connect to it
, port : 0xf00 // the nexus-server will listen on that port
// remote nexus-cli can connect (see -r option)
, host : '0.0.0.0' // if a port is set the net/tls-server will be bound to it
, remotes : {} // can be used with the cli: `nexus -r`
// a remote can contain the following keys:
// socket or port (in combination with key, cert, host)
}
where prefix
is either process.env.HOME+'/.nexus'
or
process.env.USERPROFILE+'/.nexus'
depending on process.platform
. (note that
nexus doesnt support win yet)
your config may look like this:
{ apps : '/path/to/directory'
, socket : '/path/to/socket'
, port : 12345
, host : '0.0.0.0'
, key : '/path/to/key.pem'
, cert : '/path/to/cert.pem'
, ca : '/path/to/ca'
, remotes :
{ foo : { port:12346, key:<key>, cert:<cert>, host:'foo.com' }
, bar : { port:12347, key:<key>, cert:<cert>, host:'bar.com' }
}
}
now you can access the remote nexus-server foo
with nexus -r foo <command>
or more simple - this will install all the things into /var/nexus
:
{ prefix : '/var/nexus', port : 12345 }
the nexus-server will then listen on port 0.0.0.0:12345
and on the
unix-socket /var/nexus/socket
.
FAQs
Scalable, strongly typed GraphQL schema development
The npm package nexus receives a total of 105,931 weekly downloads. As such, nexus popularity was classified as popular.
We found that nexus demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.