Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Yes. It is yet another framework built on rack. Using MVC. Doing silly stuff while you look the other way.
You are correct. There are lots of Rack frameworks out there. This one does not pretend to do anything special that you could not get from any of them.
Well, when my web host suddenly started insisting on using Phusion Passenger on all of their servers I needed to replace my old Ramaze setup without to much hassle. I tried several other Rack framework, but none of them seemed capable of replacing my apps without some major rewrites.
Yes. Writing Rack frameworks is easy! And since I am able to decide exactly what features I want I don't need to adopt to a large ecosystem of concepts I do not like.
Let us just say it is good enough for my needs at the moment. I plan to add more features/make stuff faster whenever I am finished porting most of my old apps from Ramaze.
Have a look in the spec
directory. The code base have tests covering (almost) 100 per cent of the code and I am planning on keeping it that way. At the moment the code is tested on the following platforms (using Travis CI):
I am using bacon and rack-test for testing. Run the tests by typing rake test
in the root directory. Code coverage reports are provided by simplecov. After the tests have run the an HTML report can be found in the coverage
directory.
If you are not interested in running the tests yourself you could have a look at the test status at Travis CI and the code coverage at Codecov. Their stats get updated on every commit.
At the moment there is not much documentation available, but I have started working on the wiki.
The code itself is documented using Yard. The docs are not generated automatically, you need to run rake doc
in the root directory to generate them. After running the rake task the documentation will be available in the doc
directory. Online documentation is also available from rubydoc.info, both for the latest gem and master.
Because I think it is a Good Thing™ to share code. The GNU Affero General Public License licence is very liberal unless you plan on beeing egotistical. I you feel you cannot work with that, please choose something else.
FAQs
Unknown package
We found that racket-mvc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.