
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
OpenSearch Ruby Client
opensearch-ruby is a community-driven, open source fork of elasticsearch-ruby licensed under the Apache v2.0 License. For more information, see opensearch.org.
Please see the USER_GUIDE for code snippets.
The Transport layer of the client, OpenSearch::Transport
, provides the following features:
For optimal performance, use a HTTP library which supports persistent ("keep-alive") connections, such as Patron or Typhoeus. Most such HTTP libraries are used through the Faraday HTTP library and its adapters.
Include the library's gem and adapter gem, and require the library and adapter in your code, and it will be automatically used.
If you don't use Bundler, you may need to require the library explicitly (like require 'faraday/patron'
).
Currently these libraries will be automatically detected and used:
Note on Typhoeus: You need to use v1.4.0 or up since older versions are not compatible with Faraday 1.0 or higher.
The opensearch-dsl
library provides a Ruby API for the OpenSearch Query DSL
.
The library allows to programatically build complex search definitions for OpenSearch in Ruby, which are translated to Hashes, and ultimately, JSON, the language of OpenSearch.
All OpenSearch DSL features are supported, namely:
This project has adopted the Amazon Open Source Code of Conduct. For more information see the Code of Conduct FAQ, or contact opensource-codeofconduct@amazon.com with any additional questions or comments.
See USER_GUIDE.
See Compatibility.
See UPGRADING.
See DEVELOPER_GUIDE.
If you discover a potential security issue in this project we ask that you notify AWS/Amazon Security via our vulnerability reporting page or directly via email to aws-security@amazon.com. Please do not create a public GitHub issue.
This project is licensed under the Apache v2.0 License.
Copyright OpenSearch Contributors. See NOTICE for details.
FAQs
Unknown package
We found that opensearch-ruby demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.