Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
sdk-archivist-nodejs
Advanced tools
Core functionality for the XYO NodeJS archivist. This repository implements the core objects and services used in the XYO protocol by an archivist. Additionally it provides core XYO features like performing block production, data generation, TCP Network services, and database services.
git clone https://github.com/XYOracleNetwork/sdk-archivist-nodejs.git
yarn install
yarn build
yarn mock-data
yarn test
Make sure that the branch you are on is current and checked out from the most updated remote state
A key while working in a project is to ensure that you have the latest code from the other branches. especially those that you have checked out from.
Remember to frequently:
git fetch --all
git pull <remote name - ususally origin> <branch name>
We would recommend that you do this before pushing your committed code.
NOTE Related: make sure that you are in communication with your project team, and that you check GitHub for updates to the codebase, especially the branch that you are checked out from.
When you are checkout out new branches and naming them, you should follow a solid git flow method as outlined below:
feature/<feature you are working on>
hotfix/<hotfix you are working on>
fix/<fix you are working on>
NOTE Only if this bug-fix will not interfere with dev worklflowrelease/<version number>
NOTE Only if your project is working off of a release before merge into masterNOTE: Only the Develop and Release Branch can be merged into Master
In order to ensure that production-ready software is truly ready, we need to maintain a strong git flow. This means that we should only merge our develop or release branch into master - essentially we want to lock the master
, release
and develop
branches. The develop
branch should be the home for all tested and production ready code that is ready for a final review with included checks before being brought into master, we can also use release
for production staging. All checks would include CI/CD and code quality.
For feature branches, you should git checkout -b feature/<what feature name you are working on>
NOTE Feature branches should always and only be checked out from the latest develop branch.
Bug fixes, documentation updates, and minor styling should be done through a release
branch which would be checked out from the latest develop
branch after all feature branches have been merged into the develop
branch.
The develop
branch should also be where we conduct full app testing, as opposed to feature specific. To test features, you should make sure that all feature specifc tests pass in the feature
branch that you are working on.
If you feel you may need to do a hot-fix
directly to master, please communicate when to do this. Do Not Take Hot Fixes Lightly
@storybook
dependencies@type
dependenciesSee the LICENSE file for license details.
Made with 🔥and ❄️ by XYO
FAQs
XYO Archivist SDK
The npm package sdk-archivist-nodejs receives a total of 0 weekly downloads. As such, sdk-archivist-nodejs popularity was classified as not popular.
We found that sdk-archivist-nodejs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.