
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
Your friendly little restful time series service.
/:id/:type
/:id/:type/:start
Response => Range is from the given start till current time.
?format=json: key is time, value is a number. ?format=<jpeg|png|svg>: Rendered graph of data.
Parameters => format=<json|jpeg|png|svg> (defaults to json) height= (defaults to 480) width= (defaults to 640) slice= (see below) (defaults to 1 minute) aggregate=<none|count|sum|mean|median|max|min|Q1|Q2|Q3> (defaults to mean) merge= (defaults to none)
/:id/:type/:start/:stop
Alternation in the URL can be used to select multiple ids and types at a time:
/vm/{cpu,ram,io}/1365472770/1365473070
Time can be in a convient format like that accepted by 'at' (aka timespec):
/vm/{cpu,ram,io}/last monday/last wednesday
/vm/{cpu,ram,io}/last month
All of a given type can be selected with '*':
/vm/*/yesterday
With a limited form of globbing we could also permit matches on a subset of types:
vm/net.*,io.sda{1,2}/last week
That would permit a very nice 'subtype' style where you could have several types for network or io, but also easily select all of them. If merge is specified, then the subtypes under the supplied type (e.g. merge=net) would be recombined into a pseudo-type (e.g. All of the net.* values would be seen as just generic 'net' values).
If a slice is specified, the data is aggregated into fixed size chunks. The midpoint is the time reported for the slice. The aggregation method specifies how the data in a given slice should be combined into a single datapoint.
Responses with JSON will always be canonical/rooted:
{
"vm": {
"cpu": {
"1365472770": 0.20
...
},
"ram": {...}
"io": {...}
}
}
In this way it is consistent for the user to parse responses where they have requested multiple series.
/vm{1,2,3}/cpu,ram/yesterday?slice=10m
{
"vm1": {
"cpu": {
"1365472770": 0.20
...
},
"ram": {...}
},
"vm2": {...},
"vm3": {...}
}
FAQs
Your friendly little restful time series service.
We found that piglet demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.