
Research
/Security News
Laravel Lang Compromised with RCE Backdoor Across 700+ Versions
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.
@iris-technologies/api
Advanced tools
A TypeScript client library for the Iris advertising API.
npm install @iris-technologies/api
import { IrisClient } from '@iris-technologies/api';
// Initialize the client
const client = new IrisClient('your-api-key', ['politics', 'gambling']);
// Get an advertisement
const ad = await client.getAd(
'user input context',
'assistant response context',
'user-123'
);
if (ad) {
console.log('Ad text:', ad.text);
console.log('Ad URL:', ad.url);
} else {
console.log('No ad available');
}
IrisClientnew IrisClient(apiKey: string, excludedTopics: string[])
apiKey: Your Iris API keyexcludedTopics: Array of topic strings to exclude from adsgetAd(inputPrompt: string, responsePrompt: string, userId: string): Promise<AdResponse | null>Retrieves a targeted advertisement based on the provided context.
Parameters:
inputPrompt: The user's input contextresponsePrompt: The assistant's response contextuserId: Unique identifier for the userReturns:
AdResponse | null: Advertisement object with text and url properties, or null if no ad is availableupdateExcludedTopics(excludedTopics: string[]): voidUpdates the list of excluded topics.
getExcludedTopics(): string[]Returns a copy of the current excluded topics array.
interface AdResponse {
text: string;
url: string;
}
The client handles errors silently and logs them to the console. All methods return null or safe defaults when errors occur.
# Install dependencies
npm install
# Build the package
npm run build
# Watch mode for development
npm run dev
# Clean build artifacts
npm run clean
Create an NPM account (if you don't have one):
npm adduser
Or login to existing account:
npm login
Verify your login:
npm whoami
Update package.json metadata:
author field with your informationrepository.url with your actual GitHub repositoryhomepage and bugs.url with correct URLsBefore publishing, ensure:
npm run build)# See what would be published without actually publishing
npm run publish:dry-run
# Patch version (1.0.0 → 1.0.1) - for bug fixes
npm run version:patch
# Minor version (1.0.0 → 1.1.0) - for new features
npm run version:minor
# Major version (1.0.0 → 2.0.0) - for breaking changes
npm run version:major
# Publish patch version (auto-increments and publishes)
npm run publish:patch
# Publish minor version
npm run publish:minor
# Publish major version
npm run publish:major
# Publish beta version (tagged as beta)
npm run publish:beta
# Manual version bump
npm version patch # or minor/major
# Manual publish
npm publish
# Publish with specific tag
npm publish --tag beta
npm run publish:patch # Most common for bug fixes
| Script | Description |
|---|---|
npm run build | Compile TypeScript to JavaScript |
npm run dev | Watch mode for development |
npm run clean | Remove build artifacts |
npm run version:patch | Bump patch version |
npm run version:minor | Bump minor version |
npm run version:major | Bump major version |
npm run publish:patch | Version bump + publish patch |
npm run publish:minor | Version bump + publish minor |
npm run publish:major | Version bump + publish major |
npm run publish:beta | Publish with beta tag |
npm run publish:dry-run | Test publish without actually publishing |
Permission denied errors:
npm login
# Re-authenticate and try again
Version already exists:
npm run version:patch # Increment version first
npm publish
Package name conflicts:
@iris-technologies/api require organization membership@your-username/iris-api if @iris organization doesn't existFAQs
Iris API client for retrieving targeted advertisements
The npm package @iris-technologies/api receives a total of 22 weekly downloads. As such, @iris-technologies/api popularity was classified as not popular.
We found that @iris-technologies/api demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.

Security News
Socket found a malicious postinstall hook across 700+ GitHub repos, including PHP packages on Packagist and Node.js project repositories.

Security News
Vibe coding at scale is reshaping how packages are created, contributed, and selected across the software supply chain