
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@heroku/functions-core
Advanced tools
This is a shared library for interacting with Salesforce Functions from the following:
This is a shared library for interacting with Salesforce Functions from the following:
| Used In | Project | Documentation |
|---|---|---|
| Salesforce CLI | @salesforce/plugin-functions | https://developer.salesforce.com/tools/sfdxcli |
| Visual Studio Code | salesforcedx-vscode-core | https://marketplace.visualstudio.com/items?itemName=salesforce.salesforcedx-vscode-core |
Currently, this library exposes:
generateProjectgenerateFunctionFunctionsError).LocalRun a class for running functions on the local host.runFunction for sending data to a running function.$ yarn build
$ yarn test
$ yarn lint
version field in package.jsonnpm publish to publish the library (this step must be performed using npm and not yarn)git tag -a v{VERSION} -m "Released v{VERSION}" && git push --tags to tag the release
Note:
All occurrences of{VERSION}in the command above should be replaced with the value ofversionset inpackage.json
For changes made to this library to make it into the Salesforce CLI and Visual Studio Code plugins it is necessary to create PRs against those projects. Steps for each related project are detailed below.
https://github.com/salesforcecli/plugin-functions@heroku/functions-core
Note:
Due to path length constraints for Windows machines the@heroku/functions-corepackage is aliased as@hk/functions-core
yarn.lock by running yarn installfix: in the title and be sure to include in the description a reference to a work item using @GUS-W-12345678@
Note:
The Languages Team has permission to merge and approve PRs which only bump this dependency
https://github.com/salesforcecli/cli@salesforce/plugin-functions
Note:
Due to path length constraints for Windows machines the@salesforce/plugin-functionspackage is aliased as@sf/functions
yarn.lock by running yarn installchore: bump plugin-function from {OLD_VERSION} to {NEW_VERSION}https://github.com/forcedotcom/salesforcedx-vscode@heroku/functions-coreyarn.lock by running yarn install from the project rootchore: bump functions-core from {OLD_VERSION} to {NEW_VERSION}FAQs
This is a shared library for interacting with Salesforce Functions from the following:
The npm package @heroku/functions-core receives a total of 220 weekly downloads. As such, @heroku/functions-core popularity was classified as not popular.
We found that @heroku/functions-core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 159 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.