
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@guergabo-test/sdk
Advanced tools
Resonate is in the Design Phase
Our code base is constantly evolving as we are exploring Resonate's programming model. If you are passionate about a dead simple developer experience, join us on this journey of discovery and share your thoughts.
An SDK for writing simple and elegant distributed async await applications.
Resonate offers a programming model that allows you to build distributed applications using an intuitive paradigm you already know — async await.
Distributed Async Await extends the async await programming model beyond the boundaries of a single process and makes distributed computing a first-class citizen.
Available now:
Coming soon:
Let us know features you would like Resonate to support.
npm install -g ts-node
npm install @resonatehq/sdk
npm install express @types/express
Schedules! You can now invoke a function on a recurring schedule. Please note, this feature is experimental and bugs are expected. If encountered please let us know.
import { Resonate, Context } from "@resonatehq/sdk";
const resonate = new Resonate();
resonate.schedule("everyMinute", "* * * * *", (ctx: Context) => {
console.log("every minute", Date.now());
});
resonate.schedule("everyHour", "0 * * * *", (ctx: Context) => {
console.log("every hour", Date.now());
});
resonate.start();
import { Resonate, Context } from "@resonatehq/sdk";
import express, { Request, Response } from "express";
type User = {
id: number;
};
type Song = {
id: number;
price: number;
};
type Status = {
charged: boolean;
granted: boolean;
};
async function purchase(ctx: Context, user: User, song: Song): Promise<Status> {
const charged = await ctx.run(charge, user, song);
const granted = await ctx.run(access, user, song);
return { charged, granted };
}
async function charge(ctx: Context, user: User, song: Song): Promise<boolean> {
console.log(`Charged user:${user.id} $${song.price}.`);
return true;
}
async function access(ctx: Context, user: User, song: Song): Promise<boolean> {
console.log(`Granted user:${user.id} access to song:${song.id}.`);
return true;
}
// Initialize Resonate app
const resonate = new Resonate();
resonate.register("purchase", purchase);
// Initialize Express app
const app = express();
app.use(express.json())
app.post("/purchase", async (req: Request, res: Response) => {
const user = { id: req.body?.user ?? 1 };
const song = { id: req.body?.song ?? 1, price: 1.99 };
// id uniquely identifies the purchase
const id = `purchase-${user.id}-${song.id}`;
try {
res.send(await resonate.run("purchase", id, user, song));
} catch (err) {
res.status(500).send("Could not purchase song");
}
});
app.listen(3000, () => {
console.log("Listening on port 3000");
});
Start the server.
ts-node app.ts
And call the endpoint providing a user and song id.
curl \
-X POST \
-H 'Content-Type: application/json' \
-d '{"user": 1, "song": 1}' \
http://localhost:3000/purchase
See our docs for more detailed information.
npm install
npm run lint
npm test
See our contribution guidelines.
The Resonate TypeScript SDK is available under the Apache 2.0 License.
FAQs
TypeScript SDK for Resonate
The npm package @guergabo-test/sdk receives a total of 5 weekly downloads. As such, @guergabo-test/sdk popularity was classified as not popular.
We found that @guergabo-test/sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.