Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@amplication/plugin-storage-core
Advanced tools
This plugin is used for integrating storage services into your app generated by Amplication. The plugin will add the required core functionality on top of which other storage services can be built.
[!CAUTION] The other storage plugins should have plugin ids of the form
storage-<provider>
and should be added through the plugins page of the app settings before adding this plugin to get the expected functionality.
It can be used by adding the plugin in the plugins
page of the app settings. For this plugin, no additional settings are required.
[!NOTE] There should be enitities with fields of data type
File
for this plugin to generate any additional functionality.
The following methods are added for each field of type File
in the entities:
Resolver methods:
Controller methods:
It adds graphqlUploadExpress middleware to the express app to let the app handle file uploads.
The plugin adds the StorageService
abstract class which can be extended to create storage services for different storage providers. The class does the following:
When a file is uploaded, the file is saved through the storage service and the following JSON is saved in the database:
{
"uuid": "/path/to/file", // UUID for the file (can be used to retrieve the file eg. URL or file path)
"filename": "profilePicture-<id of entity>",
"mimetype": "image/jpeg",
"encoding": "7bit",
"size": 123456, // File size in bytes
"metadata": {} // Provider specific metadata
}
build
Running npm run build
will bundle your plugin with Webpack for production.
dev
Running npm run dev
will watch your plugin's source code and automatically bundle it with every change.
FAQs
Adds the core functionality for file upload to Amplication
The npm package @amplication/plugin-storage-core receives a total of 5,160 weekly downloads. As such, @amplication/plugin-storage-core popularity was classified as popular.
We found that @amplication/plugin-storage-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.