
Research
/Security News
Coruna Respawned: Compromised art-template npm Package Leads to iOS Browser Exploit Kit
Compromised npm package art-template delivered a Coruna-like iOS Safari exploit framework through a watering-hole attack.
@buildable/messages
Advanced tools
A fully managed messaging service that lets you easily exchange event data across any app or resource.
@buildable/messagesBuildable is the easiest way to collect, transform, send and action your backend system events. Buildable simplifies the process of communicating between services or cloud apps, via Messages.
This library allows you to quickly and easily emit and listen on messages via Node.js.
In order to use emit and listen on messages, you'll need a Buildable account and Secret Key. Follow these steps:
+ Create secret key buttonCreateEnsure you store the test and live keys somewhere safe (like a password manager).
Install the @buildable/messages NPM package in your working code space:
> npm install @buildable/messages
A message contains:
event - The name of the eventpayload - The data of the eventOnce a message is emitted, it will be visible immediately in the Messages Stream on your Buildable account.
const { createClient } = require('@buildable/messages');
const client = createClient(process.env.BUILDABLE_SECRET_KEY);
client.emit("user.created", {
name: "John Doe"
});
curl --location --request POST 'https://events.buildable.dev/emit' \
--header 'X-Buildable-Secret: <YOUR SECRET KEY>' \
--header 'Content-Type: application/json' \
--data-raw '{
"event": "user.created",
"payload": {
"name": "John Doe"
}
}'
A transaction is an action that can be triggered when a message is received. A message can have multiple transactions. Each transaction has:
txKey) per messageThere are two cases for transacting on messages:
const { createClient } = require('@buildable/messages');
const client = createClient(process.env.BUILDABLE_SECRET_KEY);
// Transact on `user.created`
client.on("user.created", async ({ event, payload }) => {
console.log("Receieved message with payload: ", payload);
// Any value returned here will be set as the transaction's output
});
All Connections act as a source of events, leveraging the power of WebHooks. Once you’ve created a Connection in Buildable and subscribed to at least 1 event, messages will continually enter the Messages Stream. In most cases, once you create a Connection once, you can forget about it!
When listening on messages from cloud apps, simply add two additional options to the listener:
const { createClient } = require('@buildable/messages');
const client = createClient(process.env.BUILDABLE_SECRET_KEY);
// Listen on `customer.created` from Stripe
client.on("customer.created", async ({ event, payload }) => {
console.log("Receieved message with payload: ", payload);
// Any value returned here will be set as the transaction's output
}, {
platform: "stripe", // Platform name
label: "my-stripe-connection" // Connection name
});
In order to trigger multiple transactions on the same message, you must specify a custom transaction key (txKey). For example, if two services need to listen on the same message and trigger different custom logic, each service must pass a unique txKey to the listener.
const { createClient } = require('@buildable/messages');
const client = createClient(process.env.BUILDABLE_SECRET_KEY);
// Transaction #1 on `user.created` from service A
client.on("user.created", async ({ event, payload }) => {
// Set the notification.sent transaction output
return await sendNotification(payload);
}, {
txKey: "notification.sent"
});
// Transaction #2 on `user.created` from service B
client.on("user.created", async ({ event, payload }) => {
// Set the salesforce.customer.created transaction output
return await createCustomerOnSalesForce(payload);
}, {
txKey: "salesforce.customer.created"
});
*By default, the txKey is set to sdk.{{EVENT_NAME}}
In order to transact on messages that have already been emitted, simply pass in the additional configuration argument since. For example, to transact on messages from 10 days ago:
client.on("user.created", async ({ event, payload }) => {
// Set the notification.sent transaction output
return await sendNotification(payload);
}, {
txKey: "notification.sent",
since: Date.now() - (10 * 24 * 60 * 60 * 1000) // Since 10 days ago
});
Alternatively, you can use the Messages API. Learn more about it at hub.buildable.dev
💻 Website: https://buildable.dev/messages
📄 Docs: https://hub.buildable.dev
💬 Discord: https://discord.com/invite/47AJ42Wzys
🐦 Twitter: https://twitter.com/BuildableHQ
© 2022, Buildable Technologies Inc. - Released under the MIT License
FAQs
A fully managed messaging service that lets you easily exchange event data across any app or resource.
The npm package @buildable/messages receives a total of 10 weekly downloads. As such, @buildable/messages popularity was classified as not popular.
We found that @buildable/messages demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Compromised npm package art-template delivered a Coruna-like iOS Safari exploit framework through a watering-hole attack.

Company News
As AI accelerates how code is written and shipped, Socket is scaling to protect the software supply chain from the growing wave of attacks targeting open source dependencies.

Company News
Socket is scaling to defend open source against supply chain attacks as AI accelerates software development.