
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
rivescript-redis
Advanced tools
npm install rivescript-redis
This module implements a Redis cache driver for the RiveScript User Variable Session Manager.
It lets you actively persist your user variables to Redis instead of just in the bot's memory, so that your bot can easily recall user information across reboots and even across separate machines by storing them in Redis.
This module is part of the rivescript-js project which can be found at
https://github.com/aichaos/rivescript-js and is released under the same
license (MIT).
// Import rivescript and rivescript-redis
const RiveScript = require("rivescript"),
RedisSessionManager = require("rivescript-redis");
// Construct your RiveScript bot as normal...
let bot = new RiveScript({
utf8: true,
// Give it a new Redis session manager.
sessionManager: new RedisSessionManager({
// The constructor takes an `opts` object, and mostly passes it
// directly along to the underlying `redis` module. So all these
// parameters come from `redis`
host: "localhost", // default
port: 6369,
// NOTE: this option is used by `redis` and is also noticed by
// rivescript-redis: it's optional but recommended to set a
// prefix. The Redis keys otherwise are simply the username
// given to RiveScript.
prefix: "rivescript/"
})
});
// And carry on as normal. All user variables will be actively persisted
// in Redis (no need to call `getUservars()` and `setUservars()` to manage
// them yourself -- though these functions DO work and will get you current
// data from your Redis cache!)
MIT.
FAQs
A Redis session driver to actively store RiveScript user variables.
We found that rivescript-redis demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.