
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@hoobs/sdk
Advanced tools

HOOBS JavaScript SDK for building applications that talk with the HOOBS API.
HOOBS recommends Yarn. From your project's root run;
yarn add @hoobs/sdk
Or using NPM.
npm install @hoobs/sdk
First you need to import the SDK
import SDK from "@hoobs/sdk";
Then create an bridge.
const hoobs = SDK();
The HOOBS SDK manages authorization tokens for you. To do this you need to define the functions used to get and set the token. This is usefull, because it allows you to intergrate the authorization token into your projects state management.
hoobs.config.token.get(() => {
// fetch and return the stored token
});
hoobs.config.token.set((token) => {
// store token logic
});
Without this you will not be able to login to the HOOBS API.
The HOOBS SDK is designed to be used with Vue. To setup the mixin, modify your main.ts|js file. This example uses Vuex for managing the authorization token.
import Vue from "vue";
import Vuex from "vuex";
import SDK from "@hoobs/sdk";
import app from "./app.vue";
Vue.use(Vuex);
const store = new Vuex.Store({
state: {
session: "",
user: {
permissions: {},
},
},
mutations: {
"SESSION:SET": (state: { [key: string]: any }, token: string) => {
state.session = token;
if (token && token !== "") {
const user = JSON.parse(atob(token));
state.user = {
id: user.id,
name: user.name,
username: user.username,
permissions: user.permissions || {},
};
} else {
state.user = {
permissions: {},
};
}
}
}
};
const hoobs = SDK();
hoobs.config.token.get(() => store.state.session);
hoobs.config.token.set((token) => { store.commit("SESSION:SET", token); });
Vue.mixin(hoobs.mixin());
new Vue({
store,
render: (h) => h(app),
}).$mount("#app");
Now you will be able to access the SDK via this.$hoobs in your components.
<script>
export default {
data() {
return {
version: "",
}
},
async mounted() {
this.version = await this.$hoobs.version();
}
}
</script>
SDK documentation can be found here.
SDK Documentation
HOOBS and the HOOBS logo are registered trademarks of HOOBS Inc. Copyright (C) 2020 HOOBS Inc. All rights reserved.
FAQs
HOOBS SDK for building applications that talk with the HOOBS API.
We found that @hoobs/sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.