Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
@hikerfeed/restful-resource
Advanced tools
The JavaScript URL builder for creating consistent and RESTful resource requests, so you don't have to.
npm i @hikerfeed/restful-resource --save
RESTful Resource is a JavaScript URL builder for creating consistent and RESTful resource requests, so you don't have to. RESTful resource does not make HTTP requests. Instead, it generates the proper routes that would match the controller name. For example, take this Laravel route which maps to a controller action:
Route::get('/users', 'UsersController@index');
You can utilize RESTful resource like:
import { createRestfulResource } from '@hikerfeed/restful-resource';
import http from 'my-http';
const UserResource = createRestfulResource('users');
http.get(UserResource.index()); // => '/users'
Calling UserResource.index()
will return the appropriate route for REST conventions, in this case for the index
action. Each resource method accepts a String
, Number
, or Array
. You may call any of the standard REST methods as such:
const UserResource = createRestfulResource('users');
http.get(UserResource.index()); // => '/users'
http.post(UserResource.create()); // => '/users/create'
http.post(UserResource.store()); // => '/users'
http.get(UserResource.show(3)); // => '/users/3'
http.get(UserResource.edit(4)); // => '/users/4/edit'
http.patch(UserResource.update(5)); // => '/users/5'
http.delete(UserResource.destroy('5')); // => '/users/5'
This works nicely with a framework like Laravel which allows you to define a controller as a resource:
Route::resource('users', 'UsersController');
In plenty of cases you may have nested routes such as /users/2/photos
. In this case, you can simply add a .
between names. If you want to pass an id to the parent and child resource you may pass an Array
of numbers.
const UserPhotosResource = createRestfulResource('users.photos');
http.get(UserPhotosResource.index(2)); // => '/users/2/photos'
http.get(UserPhotosResource.update([2, 33])); // => '/users/2/photos/33'
Let's say you have a controller on your backend that excludes the actions such as create
, edit
. In Laravel, it may look like this:
Route::resource('hikes', 'HikesController')->except(['create', 'edit']);
This would generate the following routes:
GET /hikes HikesController@index
POST /hikes HikesController@store
GET /hikes HikesController@show
POST /hikes HikesController@update
POST /hikes HikesController@destroy
To ensure you're not calling routes that don't exist on your API, you can pass the except
option like so:
// typescript
import { createRestfulResource, RestfulResource } from '@hikerfeed/restful-resource';
const HikesResource = createRestfulResource('hikes', {
except: [RestfulResource.Routes.Create, RestfulResource.Routes.Edit],
});
HikesResource.index(); // /hikes
HikesResource.create() // throws an Error
// javascript
import { createRestfulResource } from '@hikerfeed/restful-resource';
const HikesResource = createRestfulResource('hikes', {
except: ['create', 'edit'],
});
HikesResource.index(); // /hikes
HikesResource.create() // throws an Error
On the contrary, you may want to only include certain routes. In Laravel this may look like:
Route::resource('hikes', 'HikesController')->only(['index']);
You may pass an only
option like so:
// typescript
import { createRestfulResource, RestfulResource } from '@hikerfeed/restful-resource';
const HikesResource = createRestfulResource('hikes', {
only: [RestfulResource.Routes.Index],
});
HikesResource.index(); // /hikes
HikesResource.edit() // throws an Error
// javascript
import { createRestfulResource } from '@hikerfeed/restful-resource';
const HikesResource = createRestfulResource('hikes', {
only: ['index'],
});
HikesResource.index(); // /hikes
HikesResource.edit() // throws an Error
FAQs
Unknown package
The npm package @hikerfeed/restful-resource receives a total of 5 weekly downloads. As such, @hikerfeed/restful-resource popularity was classified as not popular.
We found that @hikerfeed/restful-resource demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.