Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
h1. Godhead: Recipes for Monitoring with God
Godhead lets you configure God monitoring tasks to separate configuration of the program being monitored from configuration of the specific project it's used in.
It also contains a collection of starting recipes gathered from around the web:
There's skeleton files for delayed_job, workling
h2. Dependencies
Requires the gems for active_support and, of course, god. Optionally requires tlsmail (for Gmail or other secure email notification).
If you enjoy godhead you may also wish to find "Jesus,":http://github.com/dmathieu/jesus the "web interface for god to speak with mankind". Allelujah.
h2. Examples
The @examples/@ directory holds:
h2. Our use case for godhead
At infochimps, we have a lot of boxen set up as "scrapers":http://github.com/infochimps/monkeyshines and as "feed endpoints.":http://github.com/mrflip/flood_monkey These typically talk to a lightweight database of some sort, pull or push to a queue, and are controlled through a simple sinatra admin panel.
With Godhead we describe the platonic form of, say, a "god config to monitor Tokyo Tyrant". The god files for a project using Tokyo Tyrant specifies only those few ways (port numbers, memory limits, etc) that its tasks differ from any other project's Tokyo Tyrant tasks. Configuration is still done in Ruby, through any combination of config params and subclassing.
h2. Links
FAQs
Unknown package
We found that godhead demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.