
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@noonahq/noona-api
Advanced tools
This client uses [Orval](https://orval.com) to generate the client from noona-api's OpenAPI spec. It both exports Typescript interfaces and creates [React Query](https://react-query.tanstack.com) wrappers as well.
This client uses Orval to generate the client from noona-api's OpenAPI spec. It both exports Typescript interfaces and creates React Query wrappers as well.
yarn
yarn add @noonahq/noona-api react-query
npm
(meteor) npm install --save @noonahq/noona-api react-query
For each branch in the noona-api project, a NPM tag is published with it.
Example to install the package that correlates with the dev branch, use
yarn add @noonahq/noona-api@dev
import axios from "axios";
axios.interceptors.request.use(async (config) => {
const newConfig: AxiosRequestConfig = {
...config,
baseURL: "https://api.noona.is",
headers: {
// Use HQ-ACCESS-KEY if Tímatal
"NOONA-ACCESS-KEY": "XXX",
},
};
return newConfig;
});
📘 The client package itself doesn't install axios. This is due to the fact that if the client also has axios installed, two instances are present and thus configuring it in your client won't work.
Follow the quick start chapter in React Query's documentation, creating a QueryClient instance and wrap a QueryClientProvider around your application.
📘 Meteor + React + Blaze creates a new ReactDOM.render instance, resulting in Context values not being drilled down the DOM tree properly. The author of the library suggests wrapping every "level 3" React component with the provider - in our case, ReactQueryProvider. See the link for more details.
import { Company } from "@noonahq/noona-api";
import { useListCompanies } from "@noonahq/noona-api";
const { data, isLoading } = useListCompanies({
company_type_id: companyTypeId,
geolocation: {
lat: location?.latLng?.lat ?? 0,
lng: location?.latLng?.lng ?? 0,
},
sort_by: "popular",
});
const companies = data?.data;
FAQs
This client uses [Orval](https://orval.com) to generate the client from noona-api's OpenAPI spec. It both exports Typescript interfaces and creates [React Query](https://react-query.tanstack.com) wrappers as well.
We found that @noonahq/noona-api demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.