
Research
/Security News
Coruna Respawned: Compromised art-template npm Package Leads to iOS Browser Exploit Kit
Compromised npm package art-template delivered a Coruna-like iOS Safari exploit framework through a watering-hole attack.
@buildable/messages
Advanced tools
@buildable/messagesBuildable is the easiest way to collect, transform, send and action your backend system messages. Buildable simplifies the process of collecting message data from your disparate systems and connecting new tools to action those messages, allowing you to spend more of your engineering time on things that matter.
This library allows you to quickly and easily emit and listen on messages via Node.js.
In order to use emit and listen on messages, you'll need a Buildable account and Secret Key. Follow these steps:
+ Create secret key buttonCreateEnsure you store the test and live keys somewhere safe (like a password manager).
Install the @buildable/messages NPM package in your working code space:
> npm install @buildable/messages
Once a message is emitted, it will be visible immediately in the Messages Stream on your Buildable account.
const { createClient } = require('@buildable/messages');
const client = createClient(process.env.BUILDABLE_SECRET_KEY);
client.emit("my-message", {
salutation: "Hello world ⚡️"
});
curl --location --request POST 'https://events.buildable.dev/emit' \
--header 'X-Buildable-Secret: <YOUR SECRET KEY>' \
--header 'Content-Type: application/json' \
--data-raw '{
"event": "my-message",
"payload": {
"salutation": "Hello world ⚡️"
}
}'
There are two cases for transacting on messages:
const { createClient } = require('@buildable/messages');
const client = createClient(process.env.BUILDABLE_SECRET_KEY);
// Listen on `my-message`
client.on("my-message", async ({ event, payload }) => {
console.log("Receieved message with payload: ", payload);
});
All Connections act as a source of events, leveraging the power of WebHooks. Once you’ve created a Connection in Buildable and subscribed to at least 1 message type, messages will continually enter the Messages Stream. In most cases, once you create a Connection once, you can forget about it!
When listening on messages from cloud apps, simply add two additional options to the listener:
const { createClient } = require('@buildable/messages');
const client = createClient(process.env.BUILDABLE_SECRET_KEY);
// Listen on `customer.created` from Stripe
client.on("customer.created", async ({ event, payload }) => {
console.log("Receieved message with payload: ", payload);
}, {
platform: "stripe", // Platform name
label: "my-stripe-connection" // Connection name
});
💻 Website: https://buildable.dev/messages
📄 Docs: https://hub.buildable.dev
💬 Discord: https://discord.com/invite/47AJ42Wzys
🐦 Twitter: https://twitter.com/BuildableHQ
© 2022, Buildable Technologies Inc. - Released under the MIT License
FAQs
A fully managed messaging service that lets you easily exchange event data across any app or resource.
The npm package @buildable/messages receives a total of 10 weekly downloads. As such, @buildable/messages popularity was classified as not popular.
We found that @buildable/messages demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Compromised npm package art-template delivered a Coruna-like iOS Safari exploit framework through a watering-hole attack.

Company News
As AI accelerates how code is written and shipped, Socket is scaling to protect the software supply chain from the growing wave of attacks targeting open source dependencies.

Company News
Socket is scaling to defend open source against supply chain attacks as AI accelerates software development.