
Security News
Nx npm Packages Compromised in Supply Chain Attack Weaponizing AI CLI Tools
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
@iy4u/tally
Advanced tools
The Tally Node library provides convenient access to the Tally API from applications written in server-side JavaScript.
See the [Video Demonstration] covering how to use the library.
Node 12, 14 or higher.
Install the package with:
npm install @iy4u/tally --save
# or
yarn add @iy4u/tally
The package needs to be configured with your application's name and secret key, which is available in the [Tally Applications][applications].
const Tally = require('@iy4u/tally');
const secretKey = process.env.SECRET_KEY
const appName = process.env.APP_NAME
const tally = new Tally(secretKey,{appName})
// To get all records of assets a customer with peopleId = '60bfe4280a875e3711410553' owes
const allMyFoils = async () => {
try {
await this.tally.start();
const params = {
query:{
ownerID : '60bfe4280a875e3711410553'
}
}
return this.tally.foils.find(params);
} catch (error) {
console.log(error);
}
}
You can find a full FeathersJs server example in tally-samples.
FAQs
Tally API wrapper for nodejs backends
We found that @iy4u/tally demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.