Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@graphql-tools/utils
Advanced tools
Common package containting utils and types for GraphQL tools
The @graphql-tools/utils package provides a variety of utility functions to manipulate and work with GraphQL schemas. It is part of the larger GraphQL Tools ecosystem, which is designed to provide a more efficient and flexible way to work with GraphQL, especially in regards to schema handling and transformation.
Schema Merging
This feature allows you to merge multiple GraphQL schemas into one. This is particularly useful in a microservices architecture where different parts of your application might have their own schemas.
const { mergeSchemas } = require('@graphql-tools/utils');
const schema1 = /* GraphQLSchema object */;
const schema2 = /* GraphQLSchema object */;
const mergedSchema = mergeSchemas({ schemas: [schema1, schema2] });
Type Filtering
This utility helps in filtering out specific types from a GraphQL schema based on custom logic. It's useful for creating permission-based schema views.
const { filterSchema, removeTypes } = require('@graphql-tools/utils');
const schema = /* GraphQLSchema object */;
const filteredSchema = filterSchema({
schema,
typeFilter: (typeName, type) => typeName.startsWith('User')
});
Schema Printing
This function extends the basic functionality of GraphQL's printSchema to include custom directives in the output, which is essential for schemas that use them extensively.
const { printSchemaWithDirectives } = require('@graphql-tools/utils');
const schema = /* GraphQLSchema object */;
const schemaSDL = printSchemaWithDirectives(schema);
This package is a more comprehensive set of tools that includes utilities for mocking, stitching, and merging schemas. It's broader than @graphql-tools/utils, which focuses more narrowly on utility functions.
This toolkit allows you to construct GraphQL schema with an object-oriented approach. It provides utilities similar to @graphql-tools/utils but adds a layer of abstraction to build schemas using classes and methods, which some may find more intuitive.
FAQs
Common package containing utils and types for GraphQL tools
We found that @graphql-tools/utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.