
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@companieshouse/api-sdk-node
Advanced tools
This SDK abstract the calls to our public APIs.
Intended for use when making cross-web-service calls, supporting ERIC and the propagation of authentication details through to other services.
This package has been upgraded to be compatible with Node v24. Presently, it's backward compatible with v20 and v18 but compatibility is primarily required for v24 as all CH Node services are in the process of being upgraded to v24.
Use NPM to install the SDK in your project;
npm i @companieshouse/api-sdk-node
Note that this install may need to be run with the 'sudo' command to avoid an error related to file permissions (and Sophos virus scanning).
The following snippet shows how to get up and running quickly using TypeScript.
import {createApiClient} from "@companieshouse/api-sdk-node";
(async () => {
const api = createApiClient("your-api-key");
const profile = await api.companyProfile.getCompanyProfile("00006400");
console.log(profile);
})()
There is an alternative way of calling some of the services, which forces you to check for errors. It borrows concepts from the Either class found in functional programming.
import {createApiClient} from "@companieshouse/api-sdk-node";
(async () => {
const api = createApiClient("your-api-key");
const orderResult = await api.companyProfile.getOrder("an-existing-order-id");
if(orderResult.isFailure()) {
const errorResponse = orderResult.value;
console.log(errorResponse);
} else {
const order = orderResult.value;
console.log(order);
}
})()
To test the changes made to this sdk inside your project, you can use either npm link
or modify the prepare
script definition in your project's package.json
file.
npm link
From within this directory, run the following command to make symbolic links to it within the global node modules directory.
npm link
Then from within your local project, simply link it with the following command
npm link api-sdk-node
Note that if your local project is running within a Vagrant Virtual Machine, this command will need to be run on the VM.
prepare
scriptChange the definition of the prepare
script in the package.json file to match the following, replacing YOUR-BRANCH-NAME
with the name of the branch in the api-sdk-node repository that contains your changes:
"prepare": "husky install && npm install --save https://github.com/companieshouse/api-sdk-node/tarball/YOUR-BRANCH-NAME && cd node_modules/@companieshouse/api-sdk-node && npm run build"
(The husky install
command should only be present if already there in the prepare
script definition of your project)
Once done it should just be necessary to restart your project's service in docker-chs-development (assumes that your local project is running in 'development mode').
Note that the prepare
script change will need to be reverted, if wishing build and run unit-tests from the command-line, outside of the Docker environment. The change should NOT be committed or pushed to the project repository.
Jest is the framework used in this project and all tests can be run using npm.
npm t
To tun the tests with coverage, pass the --coverage
flag on the command line.
npm t -- --coverage
FAQs
This SDK abstract the calls to our public APIs.
The npm package @companieshouse/api-sdk-node receives a total of 1,925 weekly downloads. As such, @companieshouse/api-sdk-node popularity was classified as popular.
We found that @companieshouse/api-sdk-node demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.