Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@ovotech/apollo-datasource-s3
Advanced tools
S3DataSource is responsible for fetching data from a given S3 bucket using aws js API.
S3DataSource is responsible for fetching data from a given S3 bucket using aws js API. Integrates with the cache and expires tags on S3, following the example of Apollo Data Sources. This useful if you want to read data from a private / restricted s3 bucket.
yarn add @ovotech/apollo-datasource-s3
This module ships with TypeScript types. It also has helper methods to deal with JSON objects directly.
import { S3DataSource } from '@ovotech/apollo-datasource-s3';
import { S3 } from 'aws-sdk';
class MyS3DataSource extends S3DataSource {
async get() {
return await this.getObjectJson({ Bucket: 'bucket', Key: 'data.json' });
}
async put(data) {
return await this.putObjectJson(data, { Bucket: 'bucket', Key: 'test' });
}
}
const s3 = new S3();
const ds = new MyS3DataSource(s3);
You can also access the lower level api to load the raw data from s3, as well as list and delete items. Those request mimic the s3 api itself, but adds a layer of caching in front of it.
class MyS3DataSource extends S3DataSource {
async get() {
return await this.getObject({ Bucket: 'bucket', Key: 'data.json' });
}
async put(data) {
return await this.putObject({ Bucket: 'bucket', Key: 'test', Body: 'data' });
}
async list() {
return await this.listObjects({ Bucket: 'bucket' });
}
async delete() {
return await this.deleteObject({ Bucket: 'bucket', Key: 'data.json' });
}
}
The tests require a running s3 mock server, and we're using localstack for that. You'll need to start the s3 server:
SERVICES=s3 localstack start
After which you can run all the tests:
yarn test
Style is maintained with prettier and tslint
yarn lint
To deploy a new version, push to master and then create a new release. CircleCI will automatically build and deploy a the version to the npm registry.
Have a bug? File an issue with a simple example that reproduces this so we can take a look & confirm.
Want to make a change? Submit a PR, explain why it's useful, and make sure you've updated the docs (this file) and the tests (see test/S3DataSource.spec.ts
). You can run the tests with SERVICES=s3 localstack start
and yarn test
.
This project is licensed under Apache 2 - see the LICENSE file for details
FAQs
S3DataSource is responsible for fetching data from a given S3 bucket using aws js API.
We found that @ovotech/apollo-datasource-s3 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 150 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.