
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@ping-identity/p14c-js-sdk-core
Advanced tools
The library consists of multiple parts that are usable on its own and together: - helper class to work with fetch methods; - logger methods.
The library consists of multiple parts that are usable on its own and together:
#NOTE: THIS REPOSITORY IS IN A TESTING MODE AND IS NOT READY FOR PRODUCTION !!!
To install all parts as one @ping-identity/p14c-js-sdk-core you can run these commands in your project root folder:
# yarn
yarn install @ping-identity/p14c-js-sdk-core
or
# npm
npm install --save @ping-identity/p14c-js-sdk-core
Adding the --save
parameters will update the package.json file with instructions on what should be installed, so you can simply call npm install without any parameters to recreate this folder later.
To install some specific part please run these commands in your project root folder:
# yarn
yarn install @ping-identity/pingone-js-sdk-fetch
yarn install @ping-identity/pingone-js-sdk-logger
or
# npm
npm install --save @ping-identity/pingone-js-sdk-fetch
npm install --save @ping-identity/pingone-js-sdk-logger
General class to work with fetch methods based on cross-fetch universal WHATWG Fetch API for Node, Browsers and React Native.
const {Http} = require("@ping-identity/p14c-js-sdk-core");
const fetch = new Http();
const response = await fetch.getJson("https://someUrl", {accessToken: "accessTokenValue"})
Method | Description |
---|---|
fetch (uri, request) | The basic rest method that is used in all methods below. Sets Bearer Authorization header if accessToken is present in request |
delete (uri, request) | Call the delete method on requested uri |
json (uri, request) | Execute defined request with Accept: "application/json" header |
getJson (uri, request) | Execute json (uri, request) with GET method |
post (uri, request) | Execute fetch (uri, request) with POST method |
postJson (uri, request) | Execute json (uri, request) with POST method |
patchJson (uri, request) | Execute json (uri, request) with PATCH method |
putJson (uri, request) | Execute json (uri, request) with PUT method |
put (uri, request) | Execute fetch (uri, request) with PUT method |
A flexible abstraction over using console
log.
const {logger} = require("@ping-identity/p14c-js-sdk-core");
logger.info("Something has happened.");
logger.warn("Something bad has happened.");
logger.debug("Something has happened with such details.");
logger.error("Something really bad has happened.");
FAQs
The library consists of multiple parts that are usable on its own and together: - helper class to work with fetch methods; - logger methods.
We found that @ping-identity/p14c-js-sdk-core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.