Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
An Interface to help creating multi-server high scalable APIs on Heroku!
Hap is a CLI and a bit much more to manage App per Resource
APIs powered by Goliath and HaProxy
Add this line to your application's Gemfile:
gem 'hap'
And then execute:
$ bundle
Or install it yourself as:
$ gem install hap
Beware!, before start, this gem has not been fully tested on various platforms and i'm using it with ruby 2.0 on mac os x, but designed to work on heroku, so it works on heroku :)
Go and create you firt hap app by running
$ hap new my_intergalactic_api [--bundle] [--remote]
Ok, get in the directory
$ cd my_intergalactic_api
Then create the very first endpoint of this little api
$ hap endpoint showmeok
Run it locally, then head to localhost:5000/showmeok (!wow!)
$ hap server
Well, to deploy this tiny api you need a heroku account and api key, if you have already, run; but first, if you are using multiple heroku accounts deploy may fail, but are you usin heroku:accounts then run
$ hap account YourAccountName
well, we'r ready now, go live, hurray!
$ hap deploy
Viola! Your highly scalable, haproxy powered multi-app (not dyno!) api deployed!
If you missed the address of you api, you can find all data about heroku apps under deploy directory.
Good luck
Drop me a line if you liked or interested in this, @onuruyar at twitter.
ps: Thanks https://github.com/kiafaldorius/ for his buildpack, it rocks!
write more tests write documentation it can be sexier than this!
git checkout -b my-new-feature
)git commit -am 'Add some feature'
)git push origin my-new-feature
)FAQs
Unknown package
We found that hap demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.