
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@openmrs/esm-dispensing-app
Advanced tools
This repository is for the OpenMRS Dispensing App. For more information, please see the OpenMRS Frontend Developer Documentation.
The Dispensing ESM requires the "HL7-MedicationDispenseStatus" concept source and FHIR concept source, as well as "Medication Dispense Status" value/concept set, to be installed in your OpenMRS instance to properly map dispensing statuses.
References to the Iniz files that install these concept sources can be found here:
You can also manually configure these concept sources in your OpenMRS instance by adding the fhirConceptSource Mapping in the fhir_concept_source table with url http://terminology.hl7.org/CodeSystem/medicationdispense-status and name as HL7-MedicationDispenseStatus. Also make sure it relates to a similar mapping in the concept_reference_source table.
To manually configure the concept sources, you'll need to:
Add FHIR Concept Source Mapping:
fhir_concept_sourcehttp://terminology.hl7.org/CodeSystem/medicationdispense-statusHL7-MedicationDispenseStatusAdd Concept Reference Source Mapping:
concept_reference_sourceThese mappings enable the dispensing app to properly handle medication dispense statuses according to HL7 FHIR standards.
The Medication Dispense Status value set can be found in this OCL search.
It also is bundled in the "DrugDispense" OCL package provided by the Reference Application: OpenMRS refapp distro package.
The "DrugDispense" also provides the default value sets for the "Substitution Type", "Substitution Reason", and "Medication Dispense Status Reason".
The "Substitution Type" and "Substitution Reason" value sets define the valid answers for both the equivalent questions when substituting a drug. The "Medication Dispense Status Reason" provides the default answers for both the "Reason for Pause" and "Reason for Close" questions.
All of these can be customized via the config-schema, see: config-schema.
Note that following privileges need to be installed and assigned to roles:
Task: dispensing.create.dispense - Allows user to Dispense MedicationTask: dispensing.create.dispense.andModifyDetails - Allows user to modify the Quantity, Drug, Formulation and Dose Instructions (from the values specified in the Order / Medication Request) when DispensingTask: dispensing.edit.dispense - Allows user to edit an existing Medication DispenseTask: dispensing.delete.dispense - Allows user to delete an existing Medication DispenseTask: dispensing.delete.dispense.ifCreator - Allows user to delete an existing Medication Dispense, but only if they created it originallyyarn # to install dependencies
yarn start --backend "http://localhost:8080/" --port 8081 # will run against a local OpenMRS server at localhost:8080, serving the frontend from 8081
Open a browser, pointing to the port indicated above (eg. 8081):
http://localhost:8081/openmrs/spa/dispensing
If you run into errors with running the code, and see errors in the console related to having not enough file watchers on Linux, these instructions help: React Native error: enospc system limit for number of file watchers reached.
If you are unable to commit and push using Intellij, you may need to update the path in Intellij to match your terminal: Command not found.
For more information, please see the OpenMRS Frontend Developer Documentation.
In particular, the Setup section can help you get started developing microfrontends in general.
FAQs
Medication dispensing application
The npm package @openmrs/esm-dispensing-app receives a total of 3,334 weekly downloads. As such, @openmrs/esm-dispensing-app popularity was classified as popular.
We found that @openmrs/esm-dispensing-app demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 13 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.