
Research
/Security News
Malicious npm Packages Target WhatsApp Developers with Remote Kill Switch
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
@oracle/content-management-sdk
Advanced tools
The Content SDK for Oracle Content Management is a light-weight JavaScript wrapper that interacts with the Content REST APIs. This read-only SDK retrieves structured content, digital assets and content layouts that are managed in Oracle Content Management. The SDK allows you to write a web application that is content rich - allowing the use of Oracle Content Management for content management, authoring and approval and delivery from your own web server.
The SDK consists of three main classes:
Prerequisite: node.js 10.9.0 or later, and node and npm on your path.
npm install @oracle/content-management-sdk
NOTE: The SDK must be initialized with the URL of your content service. The URL uses the pattern
https://<service-name>-<account-name>.cec.ocp.oraclecloud.com
and can be given to you by your Oracle Content Management service administrator.
// Imports the contentSDK class. You could import the createDeliveryClient or createPreviewClient functions instead.
import { contentSDK } from '@oracle/content-management-sdk';
const contentDeliveryClient = contentSDK.createDeliveryClient({
contentServer: 'https://<service-name>-<account-name>.cec.ocp.oraclecloud.com',
contentVersion: 'v1.1',
channelToken: '<token>', // Use your published channel token
logger: console,
});
// Perform a load of an asset
contentDeliveryClient.getItem(....);
// Imports the contentSDK class. You could import the createDeliveryClient or createPreviewClient functions instead.
const contentSDK = require('@oracle/content-management-sdk');
const contentDeliveryClient = contentSDK.createDeliveryClient({
contentServer: 'https://<service-name>-<account-name>.cec.ocp.oraclecloud.com',
contentVersion: 'v1.1',
channelToken: '<token>', // Use your published channel token
logger: console,
});
// Perform a load of an asset
contentDeliveryClient.getItem(....);
<html>
<head>
<script type="module">
import {createDeliveryClient} from 'path_to_expanded_contentsdk_package/content.umd.js';
const client=createDeliveryClient({
contentServer: 'https://<service-name>-<account-name>.cec.ocp.oraclecloud.com',
contentVersion: 'v1.1',
channelToken: '<token>',
logger: console,
});
client.getItem(....);
</script>
</head>
<body>
</body>
</html>
<html>
<head>
<title>Using Content SDK</title>
<script src="url_of_expanded_contentsdk_package/content.umd.js"></script>
</head>
<body>
<script>
const client = contentsdk.createDeliveryClient({
contentServer: 'https://<service-name>-<account-name>.cec.ocp.oraclecloud.com',
contentVersion: 'v1.1',
channelToken: '<token>',
logger: console,
});
client.getItem(....);
</script>
</body>
</html>
For more examples, check out our open source sample projects.
This project welcomes contributions from the community. Before submitting a pull request, please review our contribution guide.
Please consult the security guide for our responsible security vulnerability disclosure process.
Copyright (c) 2017, 2022, Oracle and/or its affiliates.
Released under the Universal Permissive License v1.0 as shown at https://oss.oracle.com/licenses/upl/.
[1.6.2]
FAQs
Oracle Content Management JavaScript SDK
We found that @oracle/content-management-sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
Research
/Security News
Socket uncovered 11 malicious Go packages using obfuscated loaders to fetch and execute second-stage payloads via C2 domains.
Security News
TC39 advances 11 JavaScript proposals, with two moving to Stage 4, bringing better math, binary APIs, and more features one step closer to the ECMAScript spec.