Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@nanotime/http-please
Advanced tools
<!-- Improved compatibility of back to top link: See: https://github.com/othneildrew/Best-README-Template/pull/73 -->
HttpPlease is a wrapper for Fetch, a TypeScript library that was born as an educational project to learn how to apply design patterns and create NPM packages that are as close to production standards as possible.
The goal of this project is to deploy a small, personal tool that is easy to use and extend, and in which anyone can contribute.
Oh yes! And it works, you can use it for your personal projects, after all it's just fetch...
Let's go, then...
npm i -D @nanotime/http-please
Using this library is not different to use any other NPM library, just import it after the install and instance the class:
// Import the lib
import HttpPlease from '@nanotime/http-please';
// Create an instance
const http = new HttpPlease({
url: 'http://example.com',
options: { ... } // fetch options
})
// Make a call
http.get({ path: '/foo' }).then(res => console.log(res.data));
// It can be done also with async/await
async function getFoo() {
const response = await http.get({ path: 'foo' });
return response;
}
For more examples, please refer to the Documentation
Contributions are what make the open source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.
If you have a suggestion that would make this better, please fork the repo and create a pull request. You can also simply open an issue with the tag "feature". Don't forget to give the project a star! Thanks again!
Important note: this project has some strict rules (husky, testing, etc) for commiting and tools to help on it, don't make commits using the git command, instead just run npm run commit
, this wil guide you on the correct standard way to commiting in this project. There is also a command npm run branch
that can help you to create branch in a proper way.
npm run branch
)npm run commit'
)git push origin feature/AmazingFeature
)Distributed under the MIT License. See LICENSE.txt
for more information.
FAQs
<!-- Improved compatibility of back to top link: See: https://github.com/othneildrew/Best-README-Template/pull/73 -->
The npm package @nanotime/http-please receives a total of 3 weekly downloads. As such, @nanotime/http-please popularity was classified as not popular.
We found that @nanotime/http-please demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.