
Security News
November CVEs Fell 25% YoY, Driven by Slowdowns at Major CNAs
November CVE publications fell 25% YoY even as 2025 totals rose, showing how a few major CNAs can swing “global” counts and skew perceived risk.
home_assistant-ble
Advanced tools
Companion app from home-assistant sending BLE events.
Since HA does not cope well with bluetooth device tracking (https://home-assistant.io/components/device_tracker.bluetooth_le_tracker/) this app runs along home-assistant and sends device tracking to it.
For raspbian install required packages:
$ sudo apt-get install ruby-dev libcap-dev
$ gem install home_assistant-ble
Run home_assistant-ble [your config file] binary.
To launch as a systemd service, you can copy home_assistant-ble.service file present in this repo.
I'll probably build an archlinux package at some point (TODO).
To be able to run with a non-root user, read http://unix.stackexchange.com/questions/96106/bluetooth-le-scan-as-non-root. In short (adapt if using a non-debian distribution):
sudo apt install libcap2-bin
sudo setcap 'cap_net_raw,cap_net_admin+eip' `readlink -f \`which ruby\``
Note: these instructions are probably not sufficient, see https://github.com/kamaradclimber/home_assistant-ble/issues/1
interval: 30 # in seconds, interval between device scan. Defaults to 30
grace_period: 60 # in seconds, delay before considering a device has disappeared. Defaults to 60
home_assistant_url: http://localhost:8123 # url to contact home-assistant. Defaults to http://localhost:8123
home_assistant_token: token # Long lived access token if you're using the `homeassistant` http auth type.
home_assistant_password: xxxxx # non mandatory password to authenticate to home-assistant api. Default is nil. If `home_assistant_token` is provided this setting has no effect
home_assistant_devices: # devices whose activity will be sent to home-assistant. Default is empty (no tracked devices)
F0:5C:F4:EA:BF:C8: nut1 # [macaddress]: [identifier for home-assistant]
home_assistant_devices_file: /var/lib/hass/known_devices.yaml # read devices whose activity will be sent to home-assistant. Default is empty (devices from home-assistant are not tracked). This can easily replace home_assistant_devices setting.
FAQs
Unknown package
We found that home_assistant-ble demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
November CVE publications fell 25% YoY even as 2025 totals rose, showing how a few major CNAs can swing “global” counts and skew perceived risk.

Security News
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.

Research
/Security News
We spotted a wave of auto-generated “elf-*” npm packages published every two minutes from new accounts, with simple malware variants and early takedowns underway.