
Security News
/Company News
Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security
Capital One is partnering with Socket to proactively secure its open source supply chain.
@commonninja/node-sdk
Advanced tools
// NPM
npm i @commonninja/node-sdk
// Yarn
yarn add @commonninja/node-sdk
import { CommonNinja } from '@commonninja/node-sdk';
const client = new CommonNinja({
appId: process.env.COMMONNINJA_APP_ID,
appSecret: process.env.COMMONNINJA_APP_SECRET,
accessToken: req.query.token,
env: CommonNinja.envs.production,
});
// Get shop products, filter by category
const { data, success, message } = await client.ecommerce.getProducts({
category: '1',
});
// Get shop orders
const { data, success, message } = await client.ecommerce.getOrders();
// Get shop customers with pagination parameters
const { data, success, message } = await client.ecommerce.getCustomers({
limit: 5,
page: 1,
});
// Get user details
const { data, success, message } = await client.user.getDetails();
// Get connect to platform screen url
const connectUrl = client.auth.getConnectUrl();
// Get Shopify authentication url
const redirectUrl = client.auth.getAuthenticationUrl('shopify');
// Validate an incoming webhook message from Common Ninja
client.webhooks.validateWebhook(req);
Learn more about the different APIs in our official docs.
FAQs
Common Ninja SDK for NodeJS
The npm package @commonninja/node-sdk receives a total of 7 weekly downloads. As such, @commonninja/node-sdk popularity was classified as not popular.
We found that @commonninja/node-sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.

Security News
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.

Security News
GPT-6 Astra tried to plant malicious code in simulated open source projects using fake GitHub accounts and deceptive PRs during an assigned CTF challenge.