
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
@netlify/serverless-functions-api
Advanced tools
A Node.js module that implements the runtime API for serverless functions. It translates between the API defined by Netlify and the API expected by the underlying provider, AWS Lambda.
The API surface is quite minimal: functions are comprised of handlers that receive a Request and return a Response, using the default export.
export default async (req) => new Response(`Responding to ${req.url}`)
The module exports a getLambdaHandler
function that returns a Lambda-compatible handler. This handler receives a Lambda event, converts it to a Netlify API input (i.e. an instance of the standard Request
and a context
object), executes the function, and converts the result back into a response compatible with the Lambda API.
The source is bundled into a single file, so that it can be injected into a Lambda without any additional imports or dependencies.
The getPath
export returns the absolute path to the module. This lets consumers like zip-it-and-ship-it
easily include the file in a ZIP.
FAQs
The runtime API for Netlify Functions
The npm package @netlify/serverless-functions-api receives a total of 1,299,093 weekly downloads. As such, @netlify/serverless-functions-api popularity was classified as popular.
We found that @netlify/serverless-functions-api demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 16 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.