
Security News
Nx npm Packages Compromised in Supply Chain Attack Weaponizing AI CLI Tools
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Provide a buffered stream implementation for Ruby, independent of the underlying IO.
Please see the project documentation for more details.
Please see the project releases for all releases.
done?
to finished?
for clarity and consistency.read()
returns empty string ""
at EOF while read(size)
returns nil
at EOF.buffer
parameter in read
, read_exactly
, and read_partial
methods to allow reading into a provided buffer.IO#write
directly instead of IO#write_nonblock
, for better performance.Readable#discard_until
method to discard data until a specific pattern is found.Readable
and Writable
modules for better modularity and composition.@io.close
could hang.gets
implementation to better match Ruby's IO#gets behavior.read_until(limit:)
parameter to limit the amount of data read.buffered?
method on SSLSocket
.We welcome contributions to this project.
git checkout -b my-new-feature
).git commit -am 'Add some feature'
).git push origin my-new-feature
).In order to protect users of this project, we require all contributors to comply with the Developer Certificate of Origin. This ensures that all contributions are properly licensed and attributed.
This project is best served by a collaborative and respectful environment. Treat each other professionally, respect differing viewpoints, and engage constructively. Harassment, discrimination, or harmful behavior is not tolerated. Communicate clearly, listen actively, and support one another. If any issues arise, please inform the project maintainers.
FAQs
Unknown package
We found that io-stream demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.