
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
node-red-contrib-nools
Advanced tools
This package provides a rule engine for node-RED. It uses nools, a rete-based rule engine. You can create custom flows with multiple rules, the flow is bind to one or more assert nodes to insert new facts into the flow. Each fact is of type Message and identified by the msg.topic of the incoming node-RED message. If a message already exists with the same topic it will be updated. New messages will be asserted. If all conditions of a rule are evaluated the rule will be fired. The fire node outputs the rule name into your node-RED flow. The message object provides different functions and properties. There is also a Clock class which is available.
You can use the publish({topic: "sometopic", payload: "somepayload"}) to publish messages via the fire node. The topic property of the node operates as a filter.
Message.payload or Message.pThe current payload
Message.topic or Message.tThe topic and identifier of the message object
Message.changedtrue if the msg.payload changed
Message.currentChangetimestamp of the change
Message.lastChangetimestamp of the previous change
Message.changedFromTo(from,to)Returns true if the msg.payload changed from from to to
Message.changedTo(to)Returns true if the msg.payload changed to to from any
Message.changedFrom(from)Returns true if the msg.payload changed from from to any
Clock.getHours()Clock.getMinutes()Clock.hoursIsBetween(h1, h2)
Just install this plugin in your Node-RED folder by using npm:
npm install node-red-contrib-nools
Or if you have installed Node-RED globally use:
npm install -g node-red-contrib-nools
git checkout -b my-new-featuregit commit -am 'Add some feature'git push origin my-new-featureJochen Scheib
Inspired by Robert Hekkers: http://blog.hekkers.net/2014/06/30/making-a-scene/
MIT
FAQs
Node red nodes to integrate rules into your flow
We found that node-red-contrib-nools demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.