
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@debugr/graphql-common
Advanced tools
This package defines the shape of the data included in entries which
represent a GraphQL query. Plugins which produce or consume such entries
should conform to this shape. Unless you're developing a Debugr plugin
or log handler, you usually don't need to worry about this package, as it will
be installed and used automatically when required.
The package exports the following type definitions:
export interface GraphqlQueryData {
query: string; // the complete GraphQL query as a string
variables?: Record<string, any>; // any variables passed along with the request
operation?: string; // the extracted operation name, e.g. 'query getAllUsers'
}
export interface GraphqlQueryLogEntry<
TTaskContext extends TContextBase = TContextBase,
TGlobalContext extends TContextShape = TContextShape,
> extends LogEntry<TTaskContext, TGlobalContext> {
type: 'graphql.query';
data: GraphqlQueryData;
}
There is also a utility function called getGraphqlOperation() which attempts
to extract the GraphQL operation from the GraphqlQueryData object, either
by returning its operation property if it's nonempty, or by extracting the start
of the GraphQL query until the first { character.
FAQs
Common interfaces and utility functions for GraphQL plugins
We found that @debugr/graphql-common demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.