
Security News
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
nodebb-plugin-composer-qiniu
Advanced tools
nodebb 上传文件到七牛的插件,之前有一个 nodebb-plugin-qiniu-img,但是工作机制是先上传的本地服务器,然后再从服务器上传到七牛,效率很低,而且更严重的问题是大文件上传总是莫名失败,判断可能是七牛的 Node.js 的 SDK 有问题。为了解决这个问题,最终决定,直接修改 composer,从前端直接上传文件到七牛服务器。
这个扩展只能处理在回复面板中拖拽或者上传的文件和图片。头像,个人资料里的封面图片等等这里的上传是不通过此插件的,所以如果也想让这些地方的资源文件上传的七牛服务器的话,建议配合只用 nodebb-plugin-qiniu-img。可以一起使用,并不冲突。



FAQs
Qiniu composer for NodeBB
The npm package nodebb-plugin-composer-qiniu receives a total of 10 weekly downloads. As such, nodebb-plugin-composer-qiniu popularity was classified as not popular.
We found that nodebb-plugin-composer-qiniu demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.