
Security News
Follow-up and Clarification on Recent Malicious Ruby Gems Campaign
A clarification on our recent research investigating 60 malicious Ruby gems.
This is NOT production ready yet. It has not been extensively tested, and you use it at your own risk.
If you want to jump right in and try it out, here's how you install it:
gem install icalendar2
Website: https://github.com/ericcf/icalendar2
icalendar2 is a Ruby library for parsing, manipulating and generating iCalendar objects as described in RFC 5545. Its API is intended to be mostly compatible with that of the icalendar gem (https://github.com/sdague/icalendar), at least initially.
For example:
require 'rubygems'
require 'icalendar2'
include Icalendar2
calendar = Calendar.new
calendar.event do
dtstart Date.new(2012, 12, 25)
dtend Date.new(2012, 1, 5)
summary "12 days of Christmas."
description "Eat lots of cookies."
end
calendar.valid? # true
puts calendar.to_ical
# BEGIN:VCALENDAR
# BEGIN:VEVENT
# UID:2012-12-12T10:12:45-06:00_253060006@example.com
# DTSTAMP:20121212T101245
# DTSTART:20121225
# DTEND:20120105
# SUMMARY:12 days of Christmas.
# DESCRIPTION:Eat lots of cookies.
# END:VEVENT
# END:VCALENDAR
calendars = Parser.new(calendar.to_ical).parse
calendars.size # 1
calendars.first.valid? # true
While this gem is based on (and borrows some code from) the icalendar gem, it also improves on it in several key areas:
To run the icalendar2 tests ensure that the rspec gem is installed, and run:
rake test
gem build icalendar2.gemspec
I need your help to make this library better. Please use the GitHub issue tracker for feature requests and bug reports. The more detail you can provide the better.
As this is based on the icalendar gem, which employs the Ruby licence, this too falls under that license: http://www.ruby-lang.org/en/about/license.txt
FAQs
Unknown package
We found that icalendar2 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.
Research
/Security News
A malicious Go module posing as an SSH brute forcer exfiltrates stolen credentials to a Telegram bot controlled by a Russian-speaking threat actor.