
Security News
libxml2 Maintainer Ends Embargoed Vulnerability Reports, Citing Unsustainable Burden
Libxml2’s solo maintainer drops embargoed security fixes, highlighting the burden on unpaid volunteers who keep critical open source software secure.
Version 2.x of the Auth0 .NET SDK has not followed the accepted naming convention for async methods by ending the method with an "Async" suffix. Many of the users reached out to us as this created confusion for them.
Starting with Version 3.x we are ensuring that all of our async methods end with the "Async" suffix to make it easier on you to recognize these and know to await them.
The previous methods which do not conform to the naming convention are still there so your code does not break, but have been marked as Obsolete. We suggest that you update your code as soon as possible to make use of the correct xxxAsync methods.
Apologies for the confusion we caused many of you.
FAQs
Unknown package
We found that auth0 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Libxml2’s solo maintainer drops embargoed security fixes, highlighting the burden on unpaid volunteers who keep critical open source software secure.
Research
Security News
Socket researchers uncover how browser extensions in trusted stores are used to hijack sessions, redirect traffic, and manipulate user behavior.
Research
Security News
An in-depth analysis of credential stealers, crypto drainers, cryptojackers, and clipboard hijackers abusing open source package registries to compromise Web3 development environments.