
Security News
Rust RFC Proposes a Security Tab on crates.io for RustSec Advisories
Rustâs crates.io team is advancing an RFC to add a Security tab that surfaces RustSec vulnerability and unsoundness advisories directly on crate pages.
@kano/api-client
Advanced tools
Provides a js API for browsers to communicate with our set of microservices.
import { AccountClient } from '@kano/api-client/index.js';
const account = new AccountClient({
// Where to find the API
url: 'https://my-api.stuff.me',
// Default headers will be sent with all requests. Has default for json
defaultHeaders: {
'X-Special': 'Value',
},
});
account.login('me', 'my-password').then(session => console.log(session));
You can share options across clients by giving another client to the contructor:
import { AccountClient, UserClient } from '@kano/api-client/index.js';
const account = new AccountClient({
// Where to find the API
url: 'https://my-api.stuff.me',
});
// Same options here
const user = new UserClient(account);
Implemented clients:
AccountClient:
UserClient:
More to come
You can add plugin to a client. A plugin is a set of methods called during the lifecycle of a request.
Example:
account.addPlugin({
// Will be called before fetch. The endpoint about to be called will be provided
// You can change any of its values. Adding a response property will cancel the call
// to fetch and return the response right away
beforeFetch(endpoint) {
// Hi-jack the login endpoint and return static content
// You can use this to provide offline features
if (endpoint.name === 'login') {
endpoint.response = {
data: {
user: {
id: 'Hello',
},
},
};
}
// Alwasy return a Promise
return Promise.resolve(endpoint);
},
onError(endpoint, error) {
if (error === 'fetch failed') {
/* Silently spoof cached response */
endpoint.response = ResponseCache.lookup(endponint),
return Promise.resolve(endpoint);
} else {
/* Log and rethrow */
console.log(error);
throw error;
}
},
// Will return raw data as received from the API before processing
// Use this to cache raw responses
afterDataReceived(endpoint, data) {
if (name === 'login') {
console.log(data);
}
return Promise.resolve(data);
},
// Will be called after the data was received but before it is resolved to the client user
// Use this to reformat the data, or for logging
afterDataProcessed(endpoint, data) {
if (name === 'login') {
console.log(data);
}
return Promise.resolve(data);
},
});
This is an npm package and published publicly on npm. To do this, change the version number in the package.json (eg: 2.0.3 => 2.0.4), run yarn, then push and merge to master then run the following command from the root of the repo:
npm publish --access public
It will require you to have an account with npm and to be logged into npm in your terminal.
FAQs
Intercept calls between the server and the client try to minimise them
We found that @kano/api-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 15 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Rustâs crates.io team is advancing an RFC to add a Security tab that surfaces RustSec vulnerability and unsoundness advisories directly on crate pages.

Security News
/Research
Socket found a Rust typosquat (finch-rust) that loads sha-rust to steal credentials, using impersonation and an unpinned dependency to auto-deliver updates.

Research
/Security Fundamentals
A pair of typosquatted Go packages posing as Googleâs UUID library quietly turn helper functions into encrypted exfiltration channels to a paste site, putting developer and CI data at risk.