
Security News
minimatch Patches 3 High-Severity ReDoS Vulnerabilities
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.
binlog
Advanced tools
A rust library for creating and managing logs of arbitrary binary data. Presently it's used to collect sensor data. But it should generally be helpful in cases where you need to store timeseries data, in a nearly (but not strictly) append-only fashion.
The underlying storage of logs are pluggable via a few traits. Binlog includes built-in implementations via sqlite, redis, and in-memory-only. Additionally, python bindings allow you to use (a subset of) binlog from python.
A small example:
use binlog::{Entry, Error, Range, RangeableStore, SqliteStore, Store};
use std::borrow::Cow;
use string_cache::Atom;
/// Demonstrates the sqlite store, with results in `example.db`. You may want to delete that before
/// running this to see the results of this on an empty database.
fn main() -> Result<(), Error> {
// Create a new datastore with sqlite backing. The result will be stored in example.db, with
// default compression options. In-memory is also possible via
// `binlog::MemoryStore::default()`.
let store = SqliteStore::new("example.db", None)?;
// Add 10 entries.
for i in 1..11u8 {
let entry = Entry::new_with_timestamp(i as i64, Atom::from("sqlite_example"), vec![i]);
store.push(Cow::Owned(entry))?;
}
// Queries are done via `range`. Here we grab entries with any timestamp and any name.
let range = store.range(.., Option::<String>::None)?;
// Count the number of entries.
println!("initial count: {}", range.count()?);
// We can also iterate on the entries.
for entry in range.iter()? {
println!("entry: {:?}", entry?);
}
// Remove the entries with 4 <= ts <= 6 and with the name `sqlite_example`.
store.range(4..=6, Some(Atom::from("sqlite_example")))?.remove()?;
// Now get the range of entries with 5 <= ts and with the name `sqlite_example`.
let range = store.range(5.., Some(Atom::from("sqlite_example")))?;
println!("count after range deletion: {}", range.count()?);
for entry in range.iter()? {
println!("entry: {:?}", entry?);
}
Ok(())
}
A small example:
from binlog import binlog
store = binlog.SqliteStore("example.db")
store.push(binlog.Entry(1, "pytest_push", [1, 2, 3]))
Stores implement the Store trait, and zero or more optional extensions depending on their supported functionality. A few stores implementations are built-in to binlog:
The in-memory-only store has no means of persistence, but offers the full log functionality. This is also used internally for fuzzing other implementations against.
The redis implementation is enableable via the redis-store feature. Under the hood, it uses redis streams. It supports subscriptions, but not ranges.
The sqlite implementation is enableable via the sqlite-store feature. It supports ranges, but not subscriptions.
Tests can be run via make test. This will also be run in CI.
Benchmarks can be run via make bench.
A fuzzer is available, ensuring the the sqlite and in-memory datastores operate identically. Run it via make fuzz.
Lint and formatting checks can be run via make check. Equivalent checks will also run in CI.
FAQs
A binary data log library
We found that binlog demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.

Research
/Security News
Socket uncovered 26 malicious npm packages tied to North Korea's Contagious Interview campaign, retrieving a live 9-module infostealer and RAT from the adversary's C2.

Research
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.