
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Chill with streams at the RxBeach
RxBeach is a toolbox for creating applications that use streams to manage state. It is in the very early stages of implementation, and the API will change continuously.
The documentation is published at https://ardoq.github.io/rxbeach/ and there is also a good deal of JSDoc comments in the code.
Code is hosted in the GitHub repo ardoq/rxbeach.
We have a .git-blame-ignore-revs
file for ignoring commits with style changes
in git blame. You can configure git to use it, and VSCode and others will
respect the setting:
git config blame.ignoreRevsFile .git-blame-ignore-revs
We use dependabot to keep dependencies up to date. This is nice, because it shows us exactly where dependencies breaks our build.
To satisfy Ardoq's review policy, you should merge Dependabot PRs by approving the PR with the message @dependabot merge
.
yarn lint && yarn build && yarn test
yarn standard-version
git push --follow-tags
yarn publish
FAQs
Chill with streams at the RxBeach
The npm package rxbeach receives a total of 10 weekly downloads. As such, rxbeach popularity was classified as not popular.
We found that rxbeach demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 13 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.