
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@openfn/language-dhis2
Advanced tools
An OpenFn language pack for building expressions and operations to work with the DHIS2 API. Commonly used via OpenFn.org or manually with OpenFn CLI.
To use this package, execute commands via OpenFn/core from the root of the repository:
openfn job.js -a dhis2 -s tmp/state.json
For installation and usage, see the docs site.
All required and optional properties for state.configuration
are defined in
the official
configuration-schema.
Ensure you configure:
Example configuration:
{
"username": "admin",
"password": "district",
"hostUrl": "https://play.dhis2.org/2.36.6"
}
Helper functions simplify common DHIS2 operations. View the complete function documentation.
To run unit and integration tests, use the following commands:
pnpm test
pnpm test:integration
Note: Integration tests depend on a live DHIS2 instance.
Unit tests validate helper functions independently. For example:
create('events', payload)
perform a correct POST request?Add new unit tests whenever helper functions are updated.
Integration tests validate end-to-end behavior with a live DHIS2 instance. Ensure your test environment includes:
Modify globalState
in test/integration.js
as needed:
before(done => {
fixture.initialState = {
configuration: {
username: 'admin',
password: 'district',
hostUrl: 'https://play.dhis2.org/2.36.6',
},
program: 'IpHINAT79UW',
orgUnit: 'DiszpKrYNg8',
trackedEntityInstance: 'uhubxsfLanV',
programStage: 'eaDHS084uMp',
};
done();
});
test/mocha.opts
.For further technical details, see the documentation or contact the OpenFn community.
FAQs
OpenFn adaptor for DHIS2
The npm package @openfn/language-dhis2 receives a total of 377 weekly downloads. As such, @openfn/language-dhis2 popularity was classified as not popular.
We found that @openfn/language-dhis2 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.