
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@logion/rest-api-core
Advanced tools
This library provides the core functionlities that all logion REST-based off-chain services have in common:
Below call adds the authentication-related elements to an OpenAPI V3 document.
const spec: OpenAPIV3.Document = ...;
configureOpenApi(spec);
Below call registers the authentication controller as well as the default application error controller and a JSON response middleware.
const dino: Dino = ...;
configureDinoloop(dino);
Below call binds all provided services in the container.
const container: Container = ...;
configureContainer(container);
Simply import the app's data source:
import { appDataSource } from "@logion/rest-api-core";
The returned data source is configured using ormconfig.json file and TYPEORM_* environment variables.
This is essentially a re-implementation of the way TypeORM used to be configured before the introduction
of the multiple data source feature.
The returned data source is ready to be used with a transaction context. DefaultTransactional method
decorator can be used to set a transaction context with default settings. typeorm-transactional's
Transactional decorator may also be used safely.
FAQs
Unknown package
The npm package @logion/rest-api-core receives a total of 3 weekly downloads. As such, @logion/rest-api-core popularity was classified as not popular.
We found that @logion/rest-api-core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.