Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@prestodb/presto-js-client
Advanced tools
This library was generated with [Nx](https://nx.dev).
This library was generated with Nx.
To build the library using SWC, run the following command:
npm run build presto-client
To lint the library using ESLint, run the following command:
npm run lint presto-client
To publish a new version to a private local registry, follow these steps:
Start by cleaning your workspace using the following command:
git stash
Start a private local registry using Verdaccio:
npm run local-registry presto-js-client
In another terminal, publish the new version by running the following command:
npm run publish:local presto-client
If you're publishing a Pre-release version, run instead:
npm run publish:local presto-client -- --releaseAs=premajor|preminor|prepatch --preid=beta
Check the semver options for all available options.
If the output of the previous command is successful, check that:
presto-client/CHANGELOG.md
file was updated.presto-client/package.json
file was updated.Visit http://localhost:4873 and ensure that @prestodb/presto-js-client
was pushed successfully to the private local registry, including the git tag, CHANGELOG.md
, and package.json
files reviewed above.
Now you can run npm i @prestodb/presto-js-client
in any other project locally to test the released version before releasing it to NPM.
To publish a new version to NPM, follow these steps:
NPM_TOKEN
with write permissions to prestodb NPM organization.Start by cleaning your workspace using the following command:
git stash
Publish a new version by running the following command:
npm run publish presto-client
If you're publishing a Pre-release version, run instead:
npm run publish presto-client -- --releaseAs=premajor|preminor|prepatch --preid=beta
Check the semver options for all available options.
As part of the previous command, a draft GitHub release is also created. Go to GitHub Releases, review and edit it if necessary, and then click "Publish release" to make it public.
*If you published the package as a Pre-release version, please also mark the GitHub release as a "Pre-release."
To test the library using Jest, run the following command:
npm run test presto-client
FAQs
This is a Presto JavaScript client that connects to Presto via Presto's REST API to run queries.
We found that @prestodb/presto-js-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.