Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
An in-memory CouchDB implementation in Ruby for couchrest and SimplyStored. Works for the database and document API, by_attribute views, and for SimplyStored generated views. This way your tests will no longer depend on CouchDB and can run against an in-memory database.
It intercepts the HTTP-API calls of couchrest by implementing a HTTPAdapter for couchrest. It then delegates those calls to the in-memory database.
The in-memory database a hash of document_id => JSON-object.
RockingChair support simple views like all_docs or by_attribute. Further, it should supports all the views generated by SimplyStored. So it supports associations and soft deletion.
gem install rocking_chair
Require the gem in your tests, e.g. test_helper.rb in Rails:
require 'rocking_chair'
Then activate it:
RockingChair.enable
Make sure to reset it every now and then so that your testdata doesn't grow too much. Put this e.g. in your setup block:
def setup
RockingChair::Server.reset
end
If you have tests where you want to run against the real CouchDB, just deactivate RockingChair:
RockingChair.disable
You can also make RockingChair dump all requests:
RockingChair.enable_debug
and
RockingChair.disable_debug
At the moment the performance is not as good as it could be as there is a lot of serialization to and from JSON going on. This will be improved by storing not only the JSON tree but also the Ruby representation of the stored objects.
RockingChair is licensed under the OpenBSD / two-clause BSD license, modeled after the ISC license. See LICENSE.txt
RockingChair was written by Jonathan Weiss to make Mathias Meyer happy.
FAQs
Unknown package
We found that rocking_chair demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.