Security News
cURL Project and Go Security Teams Reject CVSS as Broken
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
serverbone
Advanced tools
Serverside additions to backbone to serve collections and models as express apps
Serverbone.js is a server-side Rest API framework that supports multiple data stores on Node.js. Especially, you can combine multiple data stores such as a document store (e.g. MongoDB using backbone-db-mongodb), and a key-value store for indexes (e.g. Redis using backbone-db-redis). The project is based on the following modules:
The goals of the framework are:
BaseModel extends backbone-blueprint's ValidatingModel providing e.g. Model lifecycle conventions, ACL related functionality & CRUD helpers.
Model for storing strings/numbers. Meant to be used together with ValueIndexMixin.
Model for storing raw JSON data in the id field. Meant to be used together /w JSONIndexMixin.
Base Collection for most other Collections
Deprecated
Mixin for creating collections, that can have their indexes stored in other databases from the main db of the Collection.
Mixin for Collections that store JSON data in model's id field.
Mixin for reading values from multiple indexes, i.e. joins multiple Redis sets.
Mixin for Collections that store plain strings into Redis sets.
ACL permissions are defined in the Model's schema as role: [actions]
. Permissions may be defined in Model level (which applies to all properties) or per property (which overrides Model level permissions). For example:
permissions: {
admin: ['*'],
owner: ['update', 'destroy'],
'*': ['read', 'create']
}
This would give admin
role permission to all verbs. owner
can update & destroy Model. Finally world
(indicated by *
) can read models & create new Model instances. How roles are defined is up to the application to implement. You should override Model's getRoles
for implementing custom functionality.
Provides mapping Model/Collection CRUD operation into HTTP verbs, thus adding routes into express application. By default the following routes are added:
Maps to Collection.fetch.
Maps to Collection.post (creates a new model).
Maps to Model.fetch (fetches model with given id).
Maps to Model.update (updates model with given id).
Maps to Model.delete (delete model with given id).
Helpers for running async functions.
Handles sending JSON/error responses.
make test
make check-coverage
open coverage/lcov-report/index.html
FAQs
Serverside additions to backbone to serve collections and models as express apps
The npm package serverbone receives a total of 145 weekly downloads. As such, serverbone popularity was classified as not popular.
We found that serverbone demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.
Security News
Biden's executive order pushes for AI-driven cybersecurity, software supply chain transparency, and stronger protections for federal and open source systems.