
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
github.com/actions-on-google/dialogflow-facts-about-google-nodejs
This sample demonstrates Actions on Google features for use on Google Assistant including custom entities, contexts, deep links, and rich responses -- using the Node.js client library and deployed on Cloud Functions for Firebase.
npm install -g firebase-tools@6.5.0
firebase login
with your Google accountagent.zip
in this sample's directory.functions
directory, run npm install
firebase deploy --project {PROJECT_ID}
to deploy the function
Function URL (dialogflowFirebaseFulfillment): https://${REGION}-${PROJECT_ID}.cloudfunctions.net/dialogflowFirebaseFulfillment
choose_cats
& choose_fact
intents.Talk to my test app
.Unit and integration tests are located in the functions/test/
. In each of the JavaScript files, change projectId
and pathToServiceAccount
to your GCP project id and the path to the JSON file for your service account - please follow the following instructions on how to create a service account.
npm install
from the functions/
directorynpm test
Notes:
fulfillUrl
, which is the url of the fulfillment. Ideally, this should be a locally run cloud function. We recommend using firebase serve
.Please read and follow the steps in the CONTRIBUTING.md.
See LICENSE.
Your use of this sample is subject to, and by using or downloading the sample files you agree to comply with, the Google APIs Terms of Service.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.