
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@outreach/client-addon-sdk
Advanced tools
This document contains all the information a developer needs to create an Outreach add-on.
In case you have any questions/comments/concerns about the client extensibility, please email us at cxt-sdk@outreach.io.
NOTE: This document is an early preview of the client extensibility framework whose primary purpose is to speed up the collaboration and scenario exploration with potential add-on creators. It will be changing at a rapid pace until the official release of the platform.
Table of content
When an Outreach user goes to a specific part of the Outreach application (e.g., opportunity page), the application will check if that user has installed add-ons for that part of the app and if yes:
The client extensibility framework supports a few integration methods, which have different coding requirements and provide a different integration level with Outreach. Each one of the methods requires one or more steps to be implemented based on the add-on requirements.
Every add-on needs to have an add-on web page, which will Outreach users see loaded as a source of add-on iframe. This page implementation has to follow a very small set of requirements.
During the development phase, add-on creators can skip this requirement and use only a Locally hosted add-on page without the need to have a publicly available page.
Every add-on also needs to create and upload a manifest file. That manifest file contains things like the URL where the add-on web page is located, contextual information which add-on needs from Outreach, details about Outreach API access, etc.
If your add-on is stateless (e.g., currency exchange calculator add-on) or your add-on has independent initialization (e.g., initialize itself based on its cookie), there is no need for any additional work to be done.
Go to manifest file page to learn more.
All of the stateful add-ons would need contextual information from Outreach to initialize itself in the proper state. For that, they need to parse from the URL a set of contextual information (e.g., opportunity id, prospect email, etc.) sent by Outreach.
Go to host url parameters parsing page to learn more.
Most of the add-ons would want to have deeper integration with Outreach application (e.g., to notify Outreach user about some add-on event), and for that, the add-on will need to integrate Outreach client sdk.
Go to Outreach client SDK page to learn more.
Some of the add-ons will need to have client access to Outreach API, and for that, they will need to add support on the add-on server required for obtaining and refreshing access tokens. This will include implementing additional endpoints, server to server calls to Outreach API, token caching, etc.
Go to Outreach API access page to learn more about API access requirements.
If you have any questions/comments/concerns about the extensibility, please check the FAQ or email us at cxt-sdk@outreach.io.
FAQs
<!-- omit in toc --> # Outreach client extensibility SDK
The npm package @outreach/client-addon-sdk receives a total of 5 weekly downloads. As such, @outreach/client-addon-sdk popularity was classified as not popular.
We found that @outreach/client-addon-sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 204 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.