
Research
PyPI Package Impersonates SymPy to Deliver Cryptomining Malware
Malicious PyPI package sympy-dev targets SymPy users, a Python symbolic math library with 85 million monthly downloads.
Scuttlebutt like eventual consistent log replication for levelup
npm install scuttleup
var scuttleup = require('scuttleup')
var log = scutlleup(db) // db is a levelup instance
var changes = log2.createReadStream({
live: true
})
changes.on('data', function(data) {
console.log(data) // print out the log - data.entry will be 'hello world'
})
log.append('hello world') // add something to the log
To replicate two logs pipe their replication stream together using the scuttlebutt protocol
var repl1 = log1.createReplicationStream()
var repl2 = log2.createReplicationStream()
// the two logs will now replicate to each other
repl1.pipe(repl2).pipe(repl1)
var log = scuttleup(db, [opts])Create a log new instance. Options can include
{
id: 'a-globally-unique-peer-id',
valueEncoding: 'utf-8' // encoding of log entries
}
log.append(entry, [callback])Add a new entry to the log
log.entry(peer, seq, [options], callback)Retrieve a entry from the log from a given peer and seq
var ws = log.createAppendStream().append as a stream
var repl = log.createReplicationStream(opts)Create a log replication stream. Pipe this to the replication stream of another log. Replication is eventual consistent and works using the scuttlebutt protocol
Options can include
{
live: false, // disable live replication. defaults to true
mode: 'sync' | 'push' | 'pull' // set replication mode. defaults to sync
}
var rs = log.createReadStream(opts)Create a log read stream. Options can include
{
live: false, // continiously read the changes,
tail: false, // only read new changes
}
var ws = log.createWriteStream()Create a log write stream
MIT
FAQs
Scuttlebutt like eventual consistent log replication for levelup
The npm package scuttleup receives a total of 3 weekly downloads. As such, scuttleup popularity was classified as not popular.
We found that scuttleup demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious PyPI package sympy-dev targets SymPy users, a Python symbolic math library with 85 million monthly downloads.

Product
Create and share saved alert views with custom tabs on the org alerts page, making it easier for teams to return to consistent, named filter sets.

Product
Socket’s Rust and Cargo support is now generally available, providing dependency analysis and supply chain visibility for Rust projects.