
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@epilot/epilot-journey-sdk
Advanced tools
[](https://www.npmjs.com/package/@epilot/epilot-journey-sdk)
epilot Journey SDK is a tool that allows developers to create Custom Blocks for the epilot Journey Builder.
Be aware that some of the features are still experimental.
Journey Builder: is a tool for building flexible Journeys in the 360 epilot platform.
The configuring user: is a user of epilot 360 that has access to the tool Journey Builder.
Warning
This feature is an experimental one. Therefore to have it available to your organisation, please contact epilot to enable it.
This document is intended to be a guide for configuring users to configure Custom Blocks in the epilot Journey Builder.
Apart from this document, examples are available in the examples folder. They include how to develop a web component and how to use it in the Journey Builder.
epilot through the 360 tool Journey Builder providers numerous amounts of block which are easy to be used and provides a UI method to configure them. Despite that, the business case could be too special or too complex for a generic solution and a custom solution might be needed.
The epilot Journey SDK allows developers to develop a custom solution (standard web component) that could be integrated to the Journey as a block. This block will be able to receive configuration like any other block, in addition it will be able to communicate back its data to the Journey
In a general perspective, the epilot Journey allows the user to add a wrapper block to it, this wrapper block will load a JS bundle which contains a web component. The wrapper block will ensure that the bundle will be able to receive configuration, data, error messages and sent data back.
Since the Custom Block wrapper is a Journey block, the configuring user will be able to apply display logics like any block.
The Custom Block wrapper expects the implementation to be a standard web component. The wrapper will pass multiple props to the component. They are documented as typescript type as the following:
type ControlledCustomBlockProps<T> = {
setValue: React.Dispatch<T>
value: T
errors?: string
required?: boolean
args?: string
}
As a configuring user, please head to the Journey Builder, and open the Journey. In the desired step, add a new custom block (as in the following GIF).
Since the Custom Block is going to be implemented as a web component. You must set the tag name and point to the bundle URL. The URL can be a local URL during development or a deployed bundle.
Tip: make sure to use an SSL secure bundle for production.
It is mainly used in some cases, when the implementation of the block might need variables to be used that the configuration user would like to control (such as an API token, a subscription id, extra URLs... etc.) In the block configurator, the configuring user can pass the data as key & value pairs in the UI. This is done by clicking on the button "Add an Option"
FAQs
[](https://www.npmjs.com/package/@epilot/epilot-journey-sdk)
We found that @epilot/epilot-journey-sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 26 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.