
Research
Security News
The Growing Risk of Malicious Browser Extensions
Socket researchers uncover how browser extensions in trusted stores are used to hijack sessions, redirect traffic, and manipulate user behavior.
@graphql-tools/github-loader
Advanced tools
A set of utils for faster development of GraphQL tools
Supply Chain Security
Vulnerability
Quality
Maintenance
License
The @graphql-tools/github-loader npm package is designed to load GraphQL schemas directly from a GitHub repository. This is particularly useful for developers who want to integrate and manage their GraphQL schemas and documents within their version-controlled source code on GitHub.
Load GraphQL schemas from GitHub
This feature allows developers to load GraphQL schemas directly from a GitHub repository by specifying the repository path, branch, and schema file location. The function requires a GitHub personal access token for authentication.
import { loadSchema } from '@graphql-tools/github-loader';
async function getSchema() {
const schema = await loadSchema('github:user/repo#branch:path/to/schema.graphql', {
token: 'YOUR_GITHUB_PERSONAL_ACCESS_TOKEN'
});
return schema;
}
Similar to @graphql-tools/github-loader, this package allows loading GraphQL schemas from a Git repository. It supports various Git services, not limited to GitHub, making it more versatile for projects hosted on other platforms like GitLab or Bitbucket.
This package enables loading GraphQL schemas from any remote endpoint. While @graphql-tools/github-loader is specific to GitHub, @graphql-tools/url-loader can fetch schemas from any URL, providing flexibility for schemas hosted on different web services.
FAQs
A set of utils for faster development of GraphQL tools
The npm package @graphql-tools/github-loader receives a total of 2,643,639 weekly downloads. As such, @graphql-tools/github-loader popularity was classified as popular.
We found that @graphql-tools/github-loader demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover how browser extensions in trusted stores are used to hijack sessions, redirect traffic, and manipulate user behavior.
Research
Security News
An in-depth analysis of credential stealers, crypto drainers, cryptojackers, and clipboard hijackers abusing open source package registries to compromise Web3 development environments.
Security News
pnpm 10.12.1 introduces a global virtual store for faster installs and new options for managing dependencies with version catalogs.