
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@pgprojectx/bazaarvoice-sdk
Advanced tools
API wrapper for BazaarVoice
# For JavaScript usage
npm install --save-exact @pgprojectx/bazaarvoice-sdk
# For CLI usage
npm install --global @pgprojectx/bazaarvoice-sdk
const bazaarvoice = require('@pgprojectx/bazaarvoice-sdk');
const client = bazaarvoice({
host: 'https://api.bazaarvoice.com',
apiVersion: '5.4',
apiKey: 'apiKey'
});
// Get Product Reviews
const reviews = await client.getProductReviews('000123645678901');
console.log(reviews);
// {
// "reviewCount": Number,
// "reviews": Array,
// "rating": Number
// }
Create an rc file to set defaults, so you don't have to pass a
host
, apiKey
, and apiVersion
flag to every command.
# ~/.bazaarvoicerc
host = https://api.bazaarvoice.com
apiKey = your-api-key
apiVersion = 5.4
@pgprojectx/bazaarvoice-sdk
will walk the directory tree looking for rc files, so you can create
one in the root of your project's directory to make the CLI
context aware.
Retrieve product review information for a specified product. The results are written to stdout
> bazaarvoice-sdk get-product-reviews -h
bazaarvoice-sdk get-product-reviews [productId]
Get product reviews for a product ID
Options:
--version Show version number [boolean]
--host, --apiHost BazaarVoice API hostname [required]
--apiKey API key for BazaarVoice [required]
--apiVersion BazaarVoice API version [required]
--productId Product ID
--raw Return full response data
-h Show help [boolean]
BazaarVoice does not return 404s for non-existing products. So default responses will result in the following object
{
"reviewCount": 0,
"reviews": [],
"rating": false
}
FAQs
API wrapper for BazaarVoice
The npm package @pgprojectx/bazaarvoice-sdk receives a total of 6 weekly downloads. As such, @pgprojectx/bazaarvoice-sdk popularity was classified as not popular.
We found that @pgprojectx/bazaarvoice-sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 33 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.