
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@graphql-tools/github-loader
Advanced tools
The @graphql-tools/github-loader npm package is designed to load GraphQL schemas directly from a GitHub repository. This is particularly useful for developers who want to integrate and manage their GraphQL schemas and documents within their version-controlled source code on GitHub.
Load GraphQL schemas from GitHub
This feature allows developers to load GraphQL schemas directly from a GitHub repository by specifying the repository path, branch, and schema file location. The function requires a GitHub personal access token for authentication.
import { loadSchema } from '@graphql-tools/github-loader';
async function getSchema() {
const schema = await loadSchema('github:user/repo#branch:path/to/schema.graphql', {
token: 'YOUR_GITHUB_PERSONAL_ACCESS_TOKEN'
});
return schema;
}
Similar to @graphql-tools/github-loader, this package allows loading GraphQL schemas from a Git repository. It supports various Git services, not limited to GitHub, making it more versatile for projects hosted on other platforms like GitLab or Bitbucket.
This package enables loading GraphQL schemas from any remote endpoint. While @graphql-tools/github-loader is specific to GitHub, @graphql-tools/url-loader can fetch schemas from any URL, providing flexibility for schemas hosted on different web services.
FAQs
A set of utils for faster development of GraphQL tools
The npm package @graphql-tools/github-loader receives a total of 3,398,621 weekly downloads. As such, @graphql-tools/github-loader popularity was classified as popular.
We found that @graphql-tools/github-loader demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.