Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
A protocol gateway for the web.
Sockethub is a translation layer for web applications to communicate with other protocols and services that are traditionally either inaccessible or impractical to use from in-browser JavaScript.
Using ActivityStream (AS) objects to pass messages to and from the web app, Sockethub acts as a smart proxy server/agent, which can maintain state, and connect to sockets, endpoints and networks that would otherwise be restricted from an application running in the browser.
Originally inspired as a sister project to RemoteStorage, and assisting in the development of unhosted and noBackend applications, Sockethub's functionality can also fit into a more traditional development stack, removing the need for custom code to handle various protocol specifics at the application layer.
Example uses of Sockethub are:
The architecture of Sockethub is extensible and supports easy implementation of additional 'platforms' to carry out tasks.
See the Sockethub wiki for documentation.
We use ActivityStreams to map the various actions of a platform to a set of AS '@type's which identify the underlying action. For example, using the XMPP platform, a friend request/accept cycle would use the activity stream types 'request-friend', 'remove-friend', 'make-friend'.
Below is a list of platform contexts we're currently working on and their types, both the completed and not yet implemented ones. They are all implemented in Sockethub platforms (each in their own repository) and can be enabled/disabled in the config.json
.
$ npm install -g sockethub
PORT
Defaults to 10550
HOST
Defaults to localhost
DEBUG
Specify the namespace to console log, ie. sockethub*
will print all sockethub related debug statements, whereas *
will also print any other modules debug statements that use the debug
module.
REDIS_PORT
Defaults to 6379
REDIS_HOST
Defaults to localhost
OR
REDIS_HOST
and REDIS_PORT
, can specify a full redis connect URL (eq. redis://username:password@host:port
) --help : this help screen
--info : displays some basic runtime info
--examples : enabled examples page and serves helper files like jquery
--host : hostname to bind to
--port : port to bind to
Run with debug output and examples enabled:
$ DEBUG=sockethub* sockethub --examples
You should then be able to browse to http://localhost:10550/examples
and try out the examples.
For production, with examples disabled.
$ DEBUG=sockethub* sockethub
Sockethub is licensed under the LGPL
Project created and maintained by Nick Jennings
Logo design by Jan-Christoph Borchardt
Sponsored by NLNET
FAQs
A polyglot messaging service
The npm package sockethub receives a total of 6 weekly downloads. As such, sockethub popularity was classified as not popular.
We found that sockethub demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.