Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
pull-notify
Advanced tools
Notify many listeners via pull-streams.
you could use when you might otherwise use an event emitter. Why not just use an event emitter? EventEmitters have a weird security contract: anyone who can listen can also emit, and they can emit or listen to any events!
Instead, events should travel down a single channel, and the ability to emit an event should be separated from the ability to listen.
var Notify = require('pull-notify')
var notify = Notify()
//create a pull stream that listens on events.
//it will eventually get all events.
pull(notify.listen(), pull.drain((evt) => console.log(evt)))
notify('hello') //emit an event.
notify.end() //tell all listeners it's over.
listers can abort (using the normal pull-stream abort), and that will remove them from the list.
MIT
FAQs
Notify many listeners via pull-streams.
The npm package pull-notify receives a total of 7 weekly downloads. As such, pull-notify popularity was classified as not popular.
We found that pull-notify demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.