Comments (12)
antony
commented on September 28, 2024
3
@otisg I might be able to yeah - will do as soon as I'm able to.
from logsene-js.
otisg
commented on September 28, 2024
3
Ugh, sorry folks, my mistake - I was thinking about https://github.com/sematext/logsene-cli
So, yes, we will address this CVE issue.
from logsene-js.
gsf4726
commented on September 28, 2024
1
This is now more critical as a vulnerability (CVE-2023-28155) was published recently, so it's now tripping npm audit.
from logsene-js.
regiluze
commented on September 28, 2024
1
@antony @yelworc we've just released a new version of the library removing all vulnerabilities. https://github.com/sematext/logsene-js/releases/tag/1.1.76
from logsene-js.
otisg
commented on September 28, 2024
Thanks, @antony. Any chance you could submit a PR?
from logsene-js.
gsf4726
commented on September 28, 2024
@otisg is it on Sematext's roadmap to fix the CVE-2023-28155 vulnerability in this module?
from logsene-js.
otisg
commented on September 28, 2024
@gsf4726 Not planned currently, unless we get a PR. Don't think this module has (m)any users.
from logsene-js.
antony
commented on September 28, 2024
https://www.npmjs.com/package/logsene-js
3064 weekly downloads, and a critical security vulnerability?
not sure I agree here.
I'd love to submit a PR but I too am pressed for time so haven't managed to yet.
from logsene-js.
otisg
commented on September 28, 2024
@antony Oh I don't believe those stats. I suspect 99% of those npm stats numbers are from bots/automated downloads/updates.
from logsene-js.
antony
commented on September 28, 2024
automated downloads/updates meaning CI? that's usage. I'm not sure what bots download npm dependencies, otherwise. I certainly haven't seen any evidence of that. I would say that the library has a reasonable amount of usage.
from logsene-js.
yelworc
commented on September 28, 2024
@gsf4726 Not planned currently, unless we get a PR. Don't think this module has (m)any users.
Hmm, that sounds vaguely concerning. Is this not the recommended package for shipping logs to Logsene in a Node.js app? The name kinda sounds like it is 😆
I'm definitely using this package in a production API – if it isn't actually being maintained, I need to look for alternatives. That's fine, but it should be clearly and visibly communicated (eg. by archiving the repo, deprecating the npm package, etc).
from logsene-js.
yelworc
commented on September 28, 2024
Thank you, much appreciated!
from logsene-js.
Related Issues (18)
- Add a constructor that does not require a type HOT 1
- Add error parameter in callback when .send() fails.
- Creation typings to provide TypeScript support HOT 3
- Errors in our builds HOT 2
- throws error and causes app to crash when sematext server is down HOT 5
- Missing module 'fs' HOT 5
- Huge npm package size HOT 2
- "user strict" should be "use strict" HOT 1
- If the sematext api returns a 400 (missing API token, for example), the library throws an error
- Browser equivalent HOT 1
- Node 18 compatibility HOT 3
- Elasticsearch 8: Action/metadata line [1] contains an unknown parameter [_type]
- Index conditional on message HOT 2
- Module require incompatibility of node-fetch starting in 1.1.76 HOT 4
- Inconsistent License notices HOT 1
- Support AWS Elasticsearch HOT 1
- Support Elasticsearch 6.x API (no types)
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from logsene-js.