Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/MarketDataApp/sdk-go
This is the official Go SDK for Market Data. It provides developers with a powerful, easy-to-use interface to obtain real-time and historical financial data. Ideal for building financial applications, trading bots, and investment strategies.
To install the SDK, you can use the following command:
go get github.com/MarketDataApp/sdk-go
After installation, you can import it in your project like this:
import api "github.com/MarketDataApp/sdk-go"
For advanced usage, review the module's complete documentation:
Signing up for a Market Data account is straightforward and grants you immediate access to our wealth of market data. We offer a free account tier that allows you to explore the capabilities of our API without any cost. Additionally, all our paid plans come with a free 30-day trial, giving you the opportunity to test out the advanced features and decide which plan best suits your needs.
Remember, no credit card is required for the free account tier, and you can upgrade, downgrade, or cancel your subscription at any time during or after the trial period.
To authenticate with the Market Data API, you need to set your token, which should have been e-mailed to you when you first signed up for an account. If you do not have a token, request a new one from the Market Data Dashboard. Set the token in the environment variable MARKETDATA_TOKEN. Alternatively, you can hardcode it in your code, but please be aware that this is not secure and could pose a risk if your code is shared.
export MARKETDATA_TOKEN="<your_api_token>" # mac/linux
setx MARKETDATA_TOKEN "<your_api_token>" # windows
Check the examples folder for working examples for each request.
Get a stock quote:
import (
"fmt"
"log"
api "github.com/MarketDataApp/sdk-go"
)
func main() {
// Initialize a new request, set the symbol parameter, make the request.
quotes, err := api.StockQuote().Symbol("AAPL").Get()
if err != nil {
log.Fatalf("Failed to get stock quotes: %v", err)
}
// Loop over the quotes and print them out.
for _, quote := range quotes {
fmt.Println(quote)
}
.Get()
method on any request to get a slice of objects. This is what you will use in most cases..Packed()
method on any request to get a struct that models the Market Data JSON response. If you want to model the objects differently, this method could be useful for you..Raw()
method on any request to *get the raw resty.Response object. This allows you to access the raw JSON or the raw *http.Response via any of Resty's methods. You can use any of the Resty methods on the response..String()
methods for all .Get()
and .Packed()
responses and sorting methods for all candle objects.Note: Since all our structs are pre-defined based on the Market Data API's standard response format, our API's optional parameters such as
human
,columns
,dateformat
,format
are not supported in this SDK because they modify the API's standard JSON output. If you wish to make use of these parameters, you will need to model your own structs that can unmarshal the modified API response.
The SDK systematically logs API responses to facilitate troubleshooting and analysis, adhering to the following rules:
client_error.log
.server_error.log
.success.log
.All log files are formatted in JSON and stored within the /logs
subdirectory. Each entry captures comprehensive details including the request URL, request headers, CF Ray ID (a unique identifier for the request), response status code, response headers, and the response body, providing a full context for each logged event.
Example of a log entry:
{
"level":"info",
"ts":"2024-01-25T15:34:10.642-0300",
"msg":"Successful Request",
"cf_ray":"84b29bd46f468d96-MIA",
"request_url":"https://api.marketdata.app/v1/stocks/quotes/AAPL/",
"ratelimit_consumed":0,
"response_code":200,
"delay_ms":254,
"request_headers":{
"Authorization": ["Bearer **********************************************************HMD0"],
"User-Agent": ["sdk-go/0.0.4"]
},
"response_headers": {
"Allow": ["GET, HEAD, OPTIONS"],
"Alt-Svc": ["h3=\":443\"; ma=86400"],
"Cf-Cache-Status": ["DYNAMIC"],
"Cf-Ray": ["84b29bd46f468d96-MIA"],
"Content-Type": ["application/json"],
"Cross-Origin-Opener-Policy": ["same-origin"],
"Date": ["Thu, 25 Jan 2024 18:34:10 GMT"],
"Nel": ["{\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}"],
"Referrer-Policy": ["same-origin"],
"Report-To": ["{\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=9vEr7PiX6zgR6cdNLegGNMCOzC6yy9KHd0IIzN3yPl14KDMBB9kkMV19xVP79jOdqPWBS9Ena%2B43XHWh%2B7cKqAQc7GrRCm2ZWpX4xqhXidyQeRgNoPcWsSsyv5xSD8v9ywFQdNc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}"],
"Server": ["cloudflare"],
"Vary": ["Accept, Origin"],
"X-Api-Ratelimit-Consumed": ["0"],
"X-Api-Ratelimit-Limit": ["100000"],
"X-Api-Ratelimit-Remaining": ["100000"],
"X-Api-Ratelimit-Reset": ["1706279400"],
"X-Api-Response-Log-Id": ["77524556"],
"X-Content-Type-Options": ["nosniff"],
"X-Frame-Options": ["DENY"]
},
"response_body": {
"ask": [194.39],
"askSize": [1],
"bid": [194.38],
"bidSize": [4],
"change": [-0.11],
"changepct": [-0.0006],
"last": [194.39],
"mid": [194.38],
"s": "ok",
"symbol": ["AAPL"],
"updated": [1706207650],
"volume": [29497567]
}
}
The SDK provides a debug mode that can be enabled to help you understand how the SDK is working and troubleshoot any issues you might encounter. When debug mode is enabled, the SDK will print the log to the console. This includes the full URL of the request, all request and response headers, and more.
To enable debug mode, you need to call the .Debug()
method on the MarketDataClient
instance and pass true
as the argument.
package main
import (
"log"
"fmt"
api "github.com/MarketDataApp/sdk-go"
)
func main() {
client, err := api.GetClient()
if err != nil {
log.Fatalf("Failed to get client: %v", err)
}
client.Debug(true) // 👈 Here is where debug mode is turned on.
quotes, err := client.StockQuotes().Symbol("AAPL").Get()
if err != nil {
log.Fatalf("Failed to get stock quotes: %v", err)
}
for _, quote := range quotes {
fmt.Println(quote)
}
}
Please note that the information printed in debug mode can be quite verbose. It is recommended to use this mode only when you are facing issues and need to understand what's happening under the hood. When debug mode is activated all requests are logged, not just requests that fail.
Debug mode can be particularly useful when you are first getting started with the SDK. It can help you understand how the SDK constructs requests, how it handles responses, and how it manages errors. By examining the debug output, you can gain a deeper understanding of the SDK's inner workings and be better prepared to handle any issues that might arise.
Market Data's Go SDK covers the vast majority of v1 endpoints. See our complete list of endpoints in the Market Data API Documentation.
Category | Endpoint | v1 Status | v2 Status |
---|---|---|---|
MARKETS | |||
Status | ✅ | ❌ | |
STOCKS | |||
Candles | ✅ | ✅ | |
Bulk Candles | ✅ | ❌ | |
Quotes | ✅ | ❌ | |
Bulk Quotes | ✅ | ❌ | |
Earnings | ✅ | ❌ | |
Tickers | ❌ | ✅ | |
News | ✅ | ❌ | |
OPTIONS | |||
Expirations | ✅ | ❌ | |
Lookup | ✅ | ❌ | |
Strikes | ✅ | ❌ | |
Option Chain | ✅ | ❌ | |
Quotes | ✅ | ❌ | |
INDICES | |||
Candles | ✅ | ❌ | |
Quotes | ✅ | ❌ |
Note on v2: Even though some v2 endpoints are available for use in this SDK, Market Data has not yet released v2 of its API for clients and v2 usage is restricted to admins only. Clients should only use v1 endpoints at this time. Even after v2 is released, we do not plan on deprecating v1 endpoints, so please build your applications with confidence using v1 endpoints.
The license for the Go SDK for Market Data is specifically for the SDK software and does not cover the data provided by the Market Data API. It's crucial to understand that accessing data through the SDK means you're also subject to the Market Data Terms of Service. You can review these terms at https://www.marketdata.app/terms/ to fully comprehend your rights and responsibilities concerning data usage.
Your contributions to the Go SDK are highly valued. Whether you're looking to add new features, rectify bugs, or enhance the documentation, we encourage you to get involved. Please submit your contributions via pull requests or issues on our GitHub repository. Your efforts play a significant role in improving the SDK for the benefit of all users.
Should you need any assistance, the most effective way to reach us is through our helpdesk. We kindly ask that you use GitHub issues solely for bug reports and not for support inquiries.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.