
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
@openfin/deployment
Advanced tools
Many desktops already have the OpenFin runtime installed and support launching your app launched via a fins link. If you wish to check to see if the OpenFin runtime and fins link support is available from your website via a standard web browser then this module provides an easy way to do that. In addition to checking if your app can be launched it can also check to ensure that all the endpoints your application needs can be reached
With npm:
npm -i @openfin/deployment
With yarn:
yarn global add @openfin/deployment
With script tag:
<script src="https://cdn.openfin.co/tools/deployment/1.0.0/openfin-deployment.js"></script>
The checkForFinsProtocol function returns an object that reveals whether the fins protocol is supported on the desktop. If the isFinsDetectionSupported and isFinsSupported properties are true, then the fins protocol is available.
import { checkForFinsProtocol } from '@openfin/deployment';
const supportInfo = await checkForFinsProtocol();
if (supportInfo.isFinsDetectionSupported && supportInfo.isFinsSupported){
// fins protocol is supported
}
The checkEndpoints function can be called to check whether the desktop can access OpenFin resources, such as the OpenFin CDN, or any custom endpoints. The function returns an array of Endpoint objects. If the status property of the Endpoint object is true, theat resource is available.
import { checkEndpoints, Endpoint, EndpointStatus, OpenFinEndpoint } from '@openfin/deployment';
const endpointResults = await checkEndpoints();
customResult.forEach((status) => {
console.log(status.url, status.success, status.statusCode);
});
// Check all OpenFin endpoints, excluding OpenFinEndpoint.Diagnostics.
const endpointCheckResult = await checkEndpoints([OpenFinEndpoint.Diagnostics]);
// Check additional custom endpoints.
const customEndpoints:Endpoint[] = [
{
id: 'OpenFin Website',
url: 'https://openfin.co',
displayName: 'OpenFin Website'
}
];
const customResult = await checkEndpoints([], customEndpoints);
To enable the checkForFinsProtocol function, please refer to the document for more details.
Two code samples are available that demonstrate how to detect the fins protocol and detect access to OpenFin resources. One code sample takes an ES module approach, the other uses a <script> tag.
The samples are available in OpenFin's Deployment repository.
Copyright 2021-2022 OpenFin Inc.
You may not run or in any way utilize the code in this package, unless you have executed an enterprise license directly with OpenFin. You can learn more about OpenFin licensing by emailing us at support@openfin.co with questions.
FAQs
Utility functions for OpenFin deployment
The npm package @openfin/deployment receives a total of 10 weekly downloads. As such, @openfin/deployment popularity was classified as not popular.
We found that @openfin/deployment demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 60 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.