
Research
/Security News
CanisterWorm: npm Publisher Compromise Deploys Backdoor Across 29+ Packages
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.
@mittwald/api-client-commons
Advanced tools
Common code base used by @mittwald/api-client-* package.
The API client does not validate any response status by design, to give you the
most flexibility while handling also erroneous responses. If you want to assert
some desired response status, you can use the assertStatus resp.
assertOneOfStatus function.
Returns: void
This method throws an ApiClientError if the given response does not match
the expectedStatus.
When you are using TypeScript this function also asserts the correct response type.
const response = await client.project.getProject({
pathParameters: {
projectId: "...",
},
});
assertStatus(response, 200);
const project = response.data;
// Project properties can now be accessed safely
const name = project.name;
Returns: void
This method throws an ApiClientError if the given response does not match
the expectedStatus.
When you are using TypeScript this function also asserts the correct response type.
const response = await client.project.getProject({
pathParameters: {
projectId: "...",
},
});
assertOneOfStatus(response, [200, 404]);
if (!response.data) {
console.log("Project not found");
}
To make it easy to opt in to some API mechanisms, a few interceptors can be easily configured.
In most cases you want to add the users access token to every API-Request as a
request header. This can be tedious if you need to do this on your own. To
automatically set the request header use withAccessToken for your APIClient
instance.
const client = new APIClient({ baseURL });
const authenticatedClient = withToken(client, token);
To opt in into the
event consistency handling
you might use withEventConsistencyHandling. This will set automatically handle
the etag response header and set its value as if-event-reached request
header for GET requests:
const client = new APIClient({ baseURL });
const authenticatedClient = withEventConsistencyHandling(client);
FAQs
Common types and utilities for mittwald API clients
The npm package @mittwald/api-client-commons receives a total of 1,066 weekly downloads. As such, @mittwald/api-client-commons popularity was classified as popular.
We found that @mittwald/api-client-commons demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.

Research
/Security News
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

Security News
ENISA’s new package manager advisory outlines the dependency security practices companies will need to demonstrate as the EU’s Cyber Resilience Act begins enforcing software supply chain requirements.