
Security News
Open VSX Begins Implementing Pre-Publish Security Checks After Repeated Supply Chain Incidents
Following multiple malicious extension incidents, Open VSX outlines new safeguards designed to catch risky uploads earlier.
Scuttlebutt like eventual consistent log replication for levelup
npm install scuttleup
var scuttleup = require('scuttleup')
var log = scutlleup(db) // db is a levelup instance
var changes = log2.createReadStream({
live: true
})
changes.on('data', function(data) {
console.log(data) // print out the log - data.entry will be 'hello world'
})
log.append('hello world') // add something to the log
To replicate two logs pipe their replication stream together using the scuttlebutt protocol
var repl1 = log1.createReplicationStream()
var repl2 = log2.createReplicationStream()
// the two logs will now replicate to each other
repl1.pipe(repl2).pipe(repl1)
var log = scuttleup(db, [opts])Create a log new instance. Options can include
{
id: 'a-globally-unique-peer-id',
valueEncoding: 'utf-8' // encoding of log entries
}
log.append(entry, [callback])Add a new entry to the log
var ws = log.createAppendStream().append as a stream
var repl = log.createReplicationStream(opts)Create a log replication stream. Pipe this to the replication stream of another log. Replication is eventual consistent and works using the scuttlebutt protocol
Options can include
{
live: false, // disable live replication. defaults to true
mode: 'sync' | 'push' | 'pull' // set replication mode. defaults to sync
}
var rs = log.createReadStream(opts)Create a log read stream. Options can include
{
live: false, // continiously read the changes,
tail: false, // only read new changes
}
var ws = log.createWriteStream()Create a log write stream
MIT
FAQs
Scuttlebutt like eventual consistent log replication for levelup
We found that scuttleup demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Following multiple malicious extension incidents, Open VSX outlines new safeguards designed to catch risky uploads earlier.

Research
/Security News
Threat actors compromised four oorzc Open VSX extensions with more than 22,000 downloads, pushing malicious versions that install a staged loader, evade Russian-locale systems, pull C2 from Solana memos, and steal macOS credentials and wallets.

Security News
Lodash 4.17.23 marks a security reset, with maintainers rebuilding governance and infrastructure to support long-term, sustainable maintenance.