
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
By Jason Meridth
Twog is a simple application that parses an RSS feed and will tweet any posts it hasn't already tweeted. Once you obtain OAuth access to a twitter account and provide it in the configuration and run Twog, it will tweet a prefix, your blog title, and a URL of the post. There are also options of using Bit.ly for URL shortening and you can install Twog as a cron job for automated polling.
sudo gem install twog
Please read this if you want to know how to get your Twitter OAuth consumer key/secret and access token/secret.
One you have those, run the command:
twog --conf
and a hidden configuration file will be created in the your home folder (~/.twog/conf.yaml). Once there, please fill it out with the information necessary to use this tool.
To see what will be Tweeted before it is, type:
twog -o
or
twog --output
In order to use Bitly for URL shortening, you'll need to go to http://bit.ly and click the Sign Up link on the top right and get an account. Once you are logged-in you click the Account link in the same top right area. You will see your API Key in the middle of the page.
Put your bit.ly username and api key into the ~/.twog/conf.yaml file to be used in the code.
To install twog as a crontab job, run the command:
twog --cronadd N
where N is the number of minutes you want twog to fire off every time.
To remove twog as a crontab job, run the command:
twog --cronrm
Crontab Info for all my non-*nix bretheren.
Please check the issues on Github for future features or bugs that need to be fixed
Copyright (c) 2019 Jason Meridth. See LICENSE for details.
FAQs
Unknown package
We found that twog demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.