notes

Some public notes (by ChALkeR)

Notes Alternatives

Similar projects and alternatives to notes

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better notes alternative or higher similarity.

notes reviews and mentions

Posts with mentions or reviews of notes. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-05-05.
  • GitHub will require 2FA by the end of 2023
    5 projects | news.ycombinator.com | 5 May 2022
    This change would certainly have helped against the infamous "Gathering weak npm credentials" research[0] from 2017, but I think that most recent supply chain security issues (in NPM, at least) have been due to: 1) typosquatting, 2) developers deliberately adding malicious (or unwanted) code into their own packages, and 3) deep transitive dependencies on packages that have genuine bugs that lead to vulnerabilities.

    It's not clear that this 2FA requirement would fix any of those problems, but it could one day allow package management tools to flag up when one developer has given/sold control of their package over to someone else who has less of a reputation and might be malicious, as was the case with the event-stream package.[1]

    [0] https://github.com/ChALkeR/notes/blob/master/Gathering-weak-...

    [1] https://www.eweek.com/security/node.js-event-stream-hack-exp...

  • Securities in NodeJs
    1 project | /r/u_embarkingonvoyage1 | 31 Jan 2022
    According to one research, 14% of the Node Package Manager is affected with some or the other security issues. So, what is the cause of these security issues?
  • A series of unfortunate commits: notable software security stories
    4 projects | dev.to | 20 Jul 2021
    In 2015, Nikita Andreevich Skovoroda, a member of the Node.js Technical Steering Committee, performed a scan on GitHub search and npm. Afterwards, he was able to obtain over 100 passwords and nearly 200 tokens for accounts associated with a number of frequently installed packages.
  • A note from our sponsor - InfluxDB
    www.influxdata.com | 23 Apr 2024
    Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →

Stats

Basic notes repo stats
3
1,260
0.0
almost 5 years ago

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com