
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@mendable/data-connectors
Advanced tools
This repository contains a collection of data connectors built by Mendable AI. These connectors are designed to output data in a specific format suitable for LLMs vectorization.
The following connectors are currently available:
We are working hard on transitioning all of our connectors to this repository. If you need a connector that is not available here, please open an issue or submit a PR.
To install the connectors, run the following command:
npm install @mendable/data-connectors
To use these connectors, you need to create a data connector with the provider of your choice. Here is an example:
import { createDataConnector } from "@mendable/data-connectors";
const webDataConnector = createDataConnector({
provider: "web-scraper",
});
webDataConnector.setOptions({
urls: ["https://docs.mendable.ai"],
mode:"single_urls",
})
const documents = await webDataConnector.getDocuments();
For data connectors that require some sort of authorization such as Google Drive one of the following methods can be used:
import { createDataConnector } from "@mendable/data-connectors";
const googleDriveDataConnector = createDataConnector({
provider: "google-drive",
});
// You can use normal google authorization, with OAuth access token or...
await googleDriveDataConnector.authorize({
access_token: "<>",
})
// You can use Nango authorization, which is a lot easier and will handle all the Auth part for you
await googleDriveDataConnector.authorizeNango({
nango_connection_id: "YOUR NANGO CONNECTION ID"
})
const documents = await googleDriveDataConnector.getDocuments();
Here is the .env.example file for the connectors. You can copy this file and rename it to .env and fill in the values. You only need to fill these values for the ones you plan on using.
NANGO_SECRET_KEY=<> // This is the secret key for your Nango account
GOOGLE_DRIVE_CLIENT_ID=<>
GOOGLE_DRIVE_CLIENT_SECRET=<>
GOOGLE_DRIVE_REDIRECT_URI=<>
SCRAPING_BEE_API_KEY=<>
NANGO_CONNECTION_ID_TEST=<>
The output of the data connectors is a Document object. The structure of the Document object is as follows:
export class Document {
content: string; // The content of the document
provider: string; // The provider of the document
id?: string; // The unique identifier of the document
createdAt?: Date; // The date when the document was created
updatedAt?: Date; // The date when the document was last updated
type?: string; // The type of the document
metadata: {
sourceURL?: string, // The source URL of the document, optional but should almost always contain.
[key: string]: any; // Any additional metadata associated with the document
}
}
Big thanks to all our contributors: @nickscamara, @rafasideguide, @mogery, @eciarla
FAQs
Data connectors for LLMs. Made by Mendable.ai
The npm package @mendable/data-connectors receives a total of 7 weekly downloads. As such, @mendable/data-connectors popularity was classified as not popular.
We found that @mendable/data-connectors demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.