
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
redis-reservation
Advanced tools
Resource reservation (locking) libraries using a Redis backend, with customizable timeouts and keep-alive support.
redis reservations are like locks/mutexes except they can expire.
Creates a new redis-reservation which includes setting up redis connection credentials.
by
- The worker namehost
- Redis host to connect toport
- Redis port to connect toheartbeat_interval
- Renew the lock at every heartbeat_interval
millisecondslock_ttl
- Renew the lock for lock_ttl
secondslog
- Log to use or else defaults to console.logpassword
- Password to authenticate with redis serverReserveResource = require 'redis-reservation'
reservation = new ReserveResource
'worker-name',
process.env.REDIS_HOST,
process.env.REDIS_PORT,
10 * 60 * 1000, # 10 minutes
30 * 60 # 30 minutes
# log, # defaults to console.log
# password # defaults to no password (empty string)
Attempts to lock the resource if it can.
resource
- The key to use to uniquely identify this lockcallback(err, lock_status)
- lock_status
is true
if lock was acquired, false
otherwise.reservation.lock job_name, (err, lock_status) ->
return err if err?
if lock_status
do_job()
else
console.log 'Reservation already held'
Waits until the lock can be acquired for the resource.
resource
- The key to use to uniquely identify this lockcallback(err, reserve_key)
- callback
is called only when the lock can be acquired. reserve_key
is the name of the key in redis that was used to acquire the lock.reservation.wait_until_lock job_name, (err, reserve_key) ->
return err if err?
do_job()
Releases the lock.
callback(err)
- Callback to be called once the lock is released, or error.reservation.release (err) ->
if err?
console.log 'Could not release lock, maybe the reservation was already lost?'
return err
FAQs
Resource reservation (locking) libraries using a Redis backend, with customizable timeouts and keep-alive support.
The npm package redis-reservation receives a total of 2 weekly downloads. As such, redis-reservation popularity was classified as not popular.
We found that redis-reservation demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.