Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@axa-ch/alt-pod-chatbot
Advanced tools
For our customers. Plug ADA on any content page on axa.ch with no configuration
all ADA configurations are in podproperties.json
Property | stage dependent | language dependent | comment |
---|---|---|---|
type | - | - | default = on-dom-loaded |
async | - | - | flag that ADA is loaded async |
contactIntent | - | x | returns an object { name, intent } - you can define what happens on the 'contact' icon |
apiBaseUrl | x | - | URL for bot endpoint to generate token |
directLineBaseUrl | x | direct line endpoint | |
stage | x | auto generated by FE team | |
language | x | auto generated by FE team | |
podversion | auto generated by FE team |
Read more about podproperties POD Properties page.
These steps only need to be done once per version, no matter to which stage you are deploying later on.
Update package.json in the "version": "1.x.yz"
field and push/merge it to the develop
branch. Please follow semver best practices.
This version will be used to select the version to build and deploy in the next steps.
To deploy the POD to the NPM registry, merge the develop
branch to the main
branch.
The CI/CD pipeline on Azure DevOps is automatically building and publishing the latest version of this POD to https://www.npmjs.com/package/@axa-ch/pod-chatbot.
Manual option: see Appendix
For documentary purposes, create a draft release on GitHub.
Field | Value |
---|---|
Tag version | Version from step 1 |
Target | main |
Title | AXA - {VERSION} {TITLE} |
Description | Summarize all changes |
Save it as draft as long you didn't released this version to Production. As soon as you released the version pro production, publish it as release (so it will be set to the latest commit).
Go to Jenkins to start the relevant jobs.
webhub-dx_module-build
and click "Build with Parameters" from the menu.Do this just once, no mater to which stages you are deploying.
Field | Value |
---|---|
webhubModuleName | pod-chatbot |
webhubModuleVersion | Version of the published npm package (only the version), like "1.10.3" |
releaseVersion | Same version as above, like "1.10.3". |
branchTobuild | Always set to "develop" (has nothing to do with the pod github source) |
Press "Build"
webhub-dx_module-deploy
and click "Build with Parameters" from the menu.Do this just once, no mater to which stages you are deploying.
Field | Value |
---|---|
webhubModuleName | pod-chatbot |
webhubModuleVersion | Version of the published npm package (only the version), like "1.10.3" |
targetStage | Select desired target stage DEV , ACC or RELEASE |
(checkboxes) | Keep them as they are. |
Press "Build"
Observer the build process.
⚠️ PROD: When deploying to production, there is a step where you manually have to confirm you really want to deploy. Don't miss out on this, otherwise the build will be aborted.
Repeat this step 2 & 3 for every stage you want to release
After deploying to production, the just built POD needs to be promoted to be available.
Open webhub-dx_module-promote
and click "Build with Parameters" from the menu.
Field | Value |
---|---|
webhubModuleName | pod-chatbot |
webhubModuleVersion | Version of the published npm package (only the version), like "1.10.3" |
Press "Build"
We have added google analytics support to the bot with docuemntation from https://confluence.axa.com/confluence/x/975VCg and https://confluence.axa.com/confluence/x/LNEXC
Add the following tag into your page:
<article
class="o-pod-chatbot js-podchatbot-mount podchatbot">
</article>
No additional data properties must be set. All is done by the POD framework.
we are using the name of the page as an convention for the start
example
page: https://www.axa.ch/de/privatkunden.html
page: https://www.axa.ch/de/privatkunden/schaden.html
you have to create in ADA a new Intent and QNA entry with the name "i_schaden"
#adastart=i_start_claims
https://www.axa.ch/de/privatkunden.html#adastart=i_start_claims
#adastart=i_greencard,direct
https://www.axa.ch/de/privatkunden.html#adastart=i_greencard,direct
The manual process would be:
timoteamims
(NOTE: password is in KeePass)npm whoami
npm logout
, npm login
npm run release
or npm run pre-release
for a pre-release. Soon you will be able to also set a tagged pre-release version in package.json
like 1.11.0-alpha.0
. As of February 2021, it's not supported by WebHub bot it's on their backlog). Using pre-release tags, allows you to test the pod in the context of the WebHub without to bump the SemVer without a reason (fast build/test cycles).FAQs
ADA - AXAs digitale Assistentin
We found that @axa-ch/alt-pod-chatbot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 48 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.