
Security News
AI Agent Submits PR to Matplotlib, Publishes Angry Blog Post After Rejection
After Matplotlib rejected an AI-written PR, the agent fired back with a blog post, igniting debate over AI contributions and maintainer burden.
@lukeed/gtoken
Advanced tools
Node.js Google Authentication Service Account Tokens
Important: This fork will change according to my needs and will not be maintained for public use!
npm install @lukeed/gtoken
const { GoogleToken } = require('@lukeed/gtoken');
const gtoken = new GoogleToken({
email: 'my_service_account_email@developer.gserviceaccount.com',
scope: ['https://scope1', 'https://scope2'], // or space-delimited string of scopes
key: '-----BEGIN RSA PRIVATE KEY-----\nXXXXXXXXXXX...'
});
const token = await gtoken.getToken()
console.log(token);
Or with promises:
gtoken.getToken()
.then(token => {
console.log(`Token: ${token}`)
})
.catch(e => console.error);
Various options that can be set when creating initializing the
gtokenobject.
options.email or options.iss: The service account email address.options.scope: An array of scope strings or space-delimited string of scopes.options.sub: The email address of the user requesting delegated access.options.key: The raw RSA private key valueReturns the cached token or requests a new one and returns it.
await gtoken.getToken();
Various properties set on the gtoken object after call to
.getToken().
gtoken.token: The access token.gtoken.expiresAt: The expiry date as milliseconds since 1970/01/01gtoken.key: The raw key value.gtoken.rawToken: Most recent raw token data received from Google.Returns true if the token has expired, or token does not exist.
gtoken.isExpired(); // false
Revoke the token if set.
await gtoken.revokeToken();
(MIT) Copyright 2018 Google LLC
FAQs
Node.js Google Authentication Service Account Tokens
The npm package @lukeed/gtoken receives a total of 1 weekly downloads. As such, @lukeed/gtoken popularity was classified as not popular.
We found that @lukeed/gtoken demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
After Matplotlib rejected an AI-written PR, the agent fired back with a blog post, igniting debate over AI contributions and maintainer burden.

Security News
HashiCorp disclosed a high-severity RCE in next-mdx-remote affecting versions 4.3.0 to 5.x when compiling untrusted MDX on the server.

Security News
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.