
Research
/Security News
Popular Tinycolor npm Package Compromised in Supply Chain Attack Affecting 40+ Packages
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
@ember-data-mirror/active-record
Advanced tools
Elegantly composable. Made for ActiveRecord
This package provides utilities for working with ActiveRecord APIs with EmberData.
Install using your javascript package manager of choice. For instance with pnpm
pnpm add @ember-data-mirror/active-record
Tagged Releases
If this package is how you are first learning about EmberData, we recommend starting with learning about the Store and Requests
Request builders are functions that produce Fetch Options. They take a few contextual inputs about the request you want to make, abstracting away the gnarlier details.
For instance, to fetch a resource from your API
import { findRecord } from '@ember-data-mirror/active-record/request';
const options = findRecord('ember-developer', '1', { include: ['pets', 'friends'] });
/*
=> {
url: 'https://api.example.com/v1/ember_developers/1?include=friends,pets',
method: 'GET',
headers: <Headers>, // 'Content-Type': 'application/json;charset=utf-8'
op: 'findRecord';
records: [{ type: 'ember-developer', id: '1' }]
}
*/
Request builder output may be used with either requestManager.request
or store.request
.
URLs are stable. The same query will produce the same URL every time, even if the order of keys in the query or values in an array changes.
URLs follow the most common ActiveRecord format (underscored pluralized resource types).
FAQs
ActiveRecord Format Support for EmberData
The npm package @ember-data-mirror/active-record receives a total of 253 weekly downloads. As such, @ember-data-mirror/active-record popularity was classified as not popular.
We found that @ember-data-mirror/active-record demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 13 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
Security News
pnpm's new minimumReleaseAge setting delays package updates to prevent supply chain attacks, with other tools like Taze and NCU following suit.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.