
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@heroku/applink
Advanced tools
Use the Node.js SDK for Heroku AppLink to develop Heroku AppLink managed apps that interact with Salesforce and Data Cloud orgs.
Node.js SDK for Heroku AppLink provides:
And much more!
For more information, see API docs.
Example use of the Node.js SDK for Heroku AppLink provided as part of the Heroku AppLink CLI Plugin's applink:project
template:
fastify.get('/accounts', async function (request, reply) {
const {event, context, logger} = request.sdk;
logger.info(`GET /accounts: ${JSON.stringify(event.data || {})}`);
const query = 'SELECT Id, Name FROM Account';
if (process.env.SALESFORCE_ORG_NAME) {
// If an org reference is set, query Accounts in that org
const orgName = process.env.SALESFORCE_ORG_NAME;
const applinkAddon = request.sdk.addons.applink;
logger.info(`Getting org '${orgName}' connection from Heroku Applink add-on...`);
const anotherOrg = await applinkAddon.getAuthorization(orgName);
logger.info(`Querying org '${orgName}' (${anotherOrg.id}) Accounts...`);
try {
const result = await anotherOrg.dataApi.query(query);
const accounts = result.records.map(rec => rec.fields);
logger.info(`For org '${orgName}' (${anotherOrg.id}), found ${accounts.length} Accounts`);
} catch (err) {
logger.error(err.message);
}
}
// Query invoking org's Accounts
const org = context.org;
logger.info(`Querying invoking org (${org.id}) Accounts...`);
const result = await org.dataApi.query(query);
const accounts = result.records.map(rec => rec.fields);
logger.info(`For invoking org (${org.id}), found the following Accounts: ${JSON.stringify(accounts || {})}`);
return accounts;
});
HEROKU_APPLINK_ADDON_NAME
- For development, configures the SDK to use a different addon name in place of "HEROKU_APPLINK". Used when fetching config vars.You will need java installed to run wiremock.
To test with coverage run yarn test:coverage
FAQs
Applink SDK for Heroku Apps.
The npm package @heroku/applink receives a total of 1,654 weekly downloads. As such, @heroku/applink popularity was classified as popular.
We found that @heroku/applink demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 189 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.