
Security News
OpenClaw Skill Marketplace Emerges as Active Malware Vector
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.
@gojek/clickstream-web
Advanced tools
Clickstream Web is a Modern, Fast, and Lightweight Event Ingestion library, adhering to the philosophy and workings of Clickstream. Clickstream is event agnostic and real-time in nature. Web applications can maintain a long-running connection to send data in real-time using Clickstream.
# npm
npm install @gojek/clickstream-web
# yarn
yarn add @gojek/clickstream-web
Clickstream from the package.import { Clickstream } from "@gojek/clickstream-web"
Clickstream accepts options to override the default behaviour. It supports event, batch & network configurations.
import { Clickstream } from "@gojek/clickstream-web"
const clckstrm = new Clickstream({
network: {
url: new URL("https://example.org"),
headers: new Headers({
Authorization: "Basic <secret-key>",
}),
},
})
Following network options are mandatory to pass while initialising -
import { Clickstream } from "@gojek/clickstream-web"
// import the proto from a package that contains your protos.
import { proto } from "protobufjs-package"
// fill in the data as per proto definition
const payload = proto.create({
label: "test-event",
properties: {
test: 1,
},
})
// initialise
const clckstrm = new Clickstream({
network: {
url: new URL("https://example.org"),
headers: new Headers({
Authorization: "Basic <secret-key>",
}),
},
})
// call on some event like user click.
document.querySelector("#some-button").addEventListener("click", () => {
clckstrm.track(payload)
})
Dispatches a new event. Returns a promise, which can be used to get the status of the track call, use for error handling.
clckstrm.track(payload);
Gracefully stops the tracking, new track function calls are ignored, previously tracked events will be processed.
clckstrm.stop();
Resumes the tracking, have no effect when called with tracking on.
clckstrm.start();
The constrsuctor takes an options object as parameter which has event, batch & network options as property.
{
event: {
// contains names of all the instant events, used to differentiate QoS0 and QoS1 events.
classification: {
instant: [],
},
// group name, prefix for event type
group: ""
},
batch: {
// max interval time between two batches, in seconds.
maxTimeBetweenTwoBatches: 10,
// max size of batch, in bytes.
maxBatchSize: 50000,
},
network: {
// Raccoon host URL
url: "",
// Request headers
headers: {},
},
}
FAQs
A Modern, Fast, and Lightweight Event Ingestion library for Web
The npm package @gojek/clickstream-web receives a total of 393 weekly downloads. As such, @gojek/clickstream-web popularity was classified as not popular.
We found that @gojek/clickstream-web demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.