
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
serverbone
Advanced tools
Serverside additions to backbone to serve collections and models as express apps
Serverbone.js is a server-side Rest API framework that supports multiple data stores on Node.js. Especially, you can combine multiple data stores such as a document store (e.g. MongoDB using backbone-db-mongodb), and a key-value store for indexes (e.g. Redis using backbone-db-redis). The project is based on the following modules:
The goals of the framework are:
BaseModel extends backbone-blueprint's ValidatingModel providing e.g. Model lifecycle conventions, ACL related functionality & CRUD helpers.
Model for storing strings/numbers. Meant to be used together with ValueIndexMixin.
Model for storing raw JSON data in the id field. Meant to be used together /w JSONIndexMixin.
Base Collection for most other Collections
Deprecated
Mixin for creating collections, that can have their indexes stored in other databases from the main db of the Collection.
Mixin for Collections that store JSON data in model's id field.
Mixin for reading values from multiple indexes, i.e. joins multiple Redis sets.
Mixin for Collections that store plain strings into Redis sets.
ACL permissions are defined in the Model's schema as role: [actions]
. Permissions may be defined in Model level (which applies to all properties) or per property (which overrides Model level permissions). For example:
permissions: {
admin: ['*'],
owner: ['update', 'destroy'],
'*': ['read', 'create']
}
This would give admin
role permission to all verbs. owner
can update & destroy Model. Finally world
(indicated by *
) can read models & create new Model instances. How roles are defined is up to the application to implement. You should override Model's getRoles
for implementing custom functionality.
Provides mapping Model/Collection CRUD operation into HTTP verbs, thus adding routes into express application. By default the following routes are added:
Maps to Collection.fetch.
Maps to Collection.post (creates a new model).
Maps to Model.fetch (fetches model with given id).
Maps to Model.update (updates model with given id).
Maps to Model.delete (delete model with given id).
Helpers for running async functions.
Handles sending JSON/error responses.
make test
make check-coverage
open coverage/lcov-report/index.html
FAQs
Serverside additions to backbone to serve collections and models as express apps
The npm package serverbone receives a total of 94 weekly downloads. As such, serverbone popularity was classified as not popular.
We found that serverbone demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.