
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@candulabs/eventing
Advanced tools
Best in-app learning experience.
TODO update readme if up to date info
Install it using node or yarn
npm install @candulabs/eventing
or with yarn if you prefer
yarn add @candulabs/eventing
The SDK is made of three functions:
Init
is used to create a singleton object of the client. We discourage re-initializing the client every time, as it risks creating less efficient memory management and race conditions. After initializing the client, you’ll be able to use the identify
and track
functions.
To get started, just run create a new client
const client = Candu.init('<MY_API_KEY>')
Because the SDK is a singleton, you’ll need to store a reference to the client object that you have created.
Identify is used to record the identity of a client. The Identify call is fundamental to receive the videos that a customer should get, as well as updating his information. You should do an identify call everytime you load a page since this call will download and refresh the result list.
client.identify(userId[, traits ])
userId
is the user identifier that you want to track. This identifier will be stored in order to be used again for the track calls. traits
is an object containing all the user properties you want to record about the user.
Tracking events is easy.
candu.track(eventName [, properties])
The function track
takes the following parameters:
Parameter name | Description |
---|---|
eventName | The name of the event you want to track. |
properties | Any additional properties you want to track. |
FAQs
Candu eventing library
The npm package @candulabs/eventing receives a total of 82 weekly downloads. As such, @candulabs/eventing popularity was classified as not popular.
We found that @candulabs/eventing demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.