
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
yaml-safe_load_stream2
Advanced tools
yaml-safe_load_stream2
The yaml-safe_load_stream2
project is a fork of
kontena/k8s-client.
Unfortunately the company Kontena.io went bankcrupt at the end of the year 2019. They had created many wonderful Ruby projects which we are grateful.
The yaml-safe_load_stream2
library is a community effort to keep
yaml-safe_load_stream
maintained without any dependencies to the former
Kontena.io organization. The library was renamed in order to publish it to
Rubygems without conflicting with yaml-safe_load_stream
.
The Ruby standard library YAML/Psych module defines YAML.safe_load
for safely loading YAML documents
There's also YAML.load_stream
for loading multi-document streams.
The problem is, there's no YAML.safe_load_stream
that would safely load a stream with multiple documents.
This gem adds a very bare bones implementation of that missing feature.
There is just one method: safe_load_stream(yaml_content, optional_filename_to_be_used_in_exception_messages)
When used with a block, it will yield each document separately:
YAMLSafeLoadStream.safe_load_stream("---\nhello: world\n\n---\nhello: universe\n") do |document|
puts document.inspect
end
# outputs:
# { 'hello' => 'world' }
# { 'hello' => 'universe' }
When used without a block, it will return an Array containing documents in the stream:
docs = YAMLSafeLoadStream.safe_load_stream("---\nhello: world\n\n---\nhello: universe\n")
puts docs.inspect
# outputs:
# [{ 'hello' => 'world' }, { 'hello' => 'universe' }]
require 'yaml/safe_load_stream'
YAMLSafeLoadStream.safe_load_stream("---\nhello: world\n\n---\nhello: universe\n")
require 'yaml/safe_load_stream'
using YAMLSafeLoadStream
YAML.safe_load_stream("---\nhello: world\n\n---\nhello: universe\n")
core-ext
require 'yaml/safe_load_stream/core-ext'
YAML.safe_load_stream("---\nhello: world\n\n---\nhello: universe\n")
Add this line to your application's Gemfile:
gem 'yaml-safe_load_stream2'
And then execute:
$ bundle
Or install it yourself as:
$ gem install yaml-safe_load_stream2
Bug reports and pull requests are welcome on GitHub at https://github.com/tsutsu/yaml-safe_load_stream2
FAQs
Unknown package
We found that yaml-safe_load_stream2 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.