
Security News
November CVEs Fell 25% YoY, Driven by Slowdowns at Major CNAs
November CVE publications fell 25% YoY even as 2025 totals rose, showing how a few major CNAs can swing “global” counts and skew perceived risk.
spree_matkahuolto
Advanced tools
TODO: Write a gem description
Add this line to your application's Gemfile:
gem 'spree_matkahuolto'
And then execute:
$ bundle
Or install it yourself as:
$ gem install spree_matkahuolto
Then, to copy and execute the migrations, run:
$ rails g spree_matkahuolto:install
Then, add this requirement in your application.js.coffee
#= require shipping_method_matkahuolto
And add this requirement to your application.scss
*= require shipping_method_matkahuolto
Give Rails access to your Matkahuolto credentials (username, password and test_mode) as environment variables:
ENV["#{Rails.env.upcase}_MATKAHUOLTO_USERNAME"]
ENV["#{Rails.env.upcase}_MATKAHUOLTO_PASSWORD"]
ENV["#{Rails.env.upcase}_MATKAHUOLTO_TEST_MODE"]
In the Spree backend, shipping methods which internal names contains the following will be automatically linked to Matkahuolto backend:
matkahuolto_lahella
matkahuolto_jako
In the Spree checkout process, on the delivery method selection page, Matkahuolto Lahella will display a selection of available pickup places
In the Spree backend, any order that used Matkahuolto Lahella or Matkahuolto Jako as a delivery method will now provide a "print labels" link enabling to automatically download the package label PDF generated by Matkahuolto.
The Labels are saved to the file system. This rake tasks cleans up all labels older than 3 weeks:
rake labels:cleanup
You can setup a 'whenever' scheduled job by adding the following lines to your config/schedule.rb
every :sunday, :at => '12pm' do
rake "labels:cleanup"
end
Don't forget to use the 'whenever' capistrano script to deploy your scheduled job.
git checkout -b my-new-feature)git commit -am 'Add some feature')git push origin my-new-feature)FAQs
Unknown package
We found that spree_matkahuolto demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
November CVE publications fell 25% YoY even as 2025 totals rose, showing how a few major CNAs can swing “global” counts and skew perceived risk.

Security News
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.

Research
/Security News
We spotted a wave of auto-generated “elf-*” npm packages published every two minutes from new accounts, with simple malware variants and early takedowns underway.