
Research
/Security News
DuckDB npm Account Compromised in Continuing Supply Chain Attack
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
ActsAsAccount implements a "Double Entry Accounting" system for your Rails-models.
It hooks into ActiveRecord and allows to add accounts to any model by
simply means of adding has_account
to your model. Because the accounts
are connected via a has_many
relation no migration to the account-holder
tables is needed.
We also hook into the ActionController request cycle to warn the developer if a request has left uncommitted changes in the system.
It is possible to configure if attributes (postings_count, balance, last_valuta) are persisted on the Account or if it is calculated on demand.
ActsAsAccount.configure do |config|
# Default values:
# config.persist_attributes_on_account = true
end
Enabling persistence means that the sending and receiving account will aquire a lock when making a transfer to ensure correct data. This can be problematic in a high load scenario where many transfers to the same accounts are processed in parallel.
Run the cucumber features from the acs_as_account gem, just execute
rake features:create_database
cucumber
You need to update the data in VERSION
and Rakefile and run rake
(because it uses GemHadar).
rake gem:push
will push the version to rubygems.
Rails 4 is supported since version 3.1.0, Rails 7 since 3.2.2 .
This gem was written for the payment backend of betterplace.org by Thies C. Arntzen, "thieso2", Norman Timmler, "unnu" and others.
Copyright (c) 2010-2024 gut.org gAG, released under the Apache License v2.0.
FAQs
Unknown package
We found that acts_as_account demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.
Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.