Security News
Fluent Assertions Faces Backlash After Abandoning Open Source Licensing
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
@rexlabs/npm-hook-receiver
Advanced tools
sample code for receiving package hooks from the npm registry
Sample code showing you how to receive a package hook from the npm registry, verify its signature, and handle its payload. This module makes a restify server that you configure to receive hook payloads at whatever path you like. The server emits events when notifications arrive. Listen for the events to do something interesting! For example, it's easy to write a Slack bot that echoes events to a Slack channel.
var makeReceiver = require('npm-hook-receiver');
var server = makeReceiver({
secret: 'this-is-a-shared-secret',
mount: '/hook'
});
server.on('hook', function(message)
{
console.log(`got ${message.event} type ${message.type} on ${message.name}`);
console.log(`object is in ${message.payload}`);
});
server.on('package:star', function(message)
{
console.log(`package ${message.name} was starred by ${message.sender}!`);
});
server.listen(8080, function()
{
console.log('Ready to receive hooks!');
});
how about you try and remix on glitch
https://glitch.com/edit/#!/possible-pipe
This example hook receiver exports a single function that takes a config object and returns a restify server. The config object must have two required fields plus any configuration you'd like to pass along to restify's createServer()
function. The two required fields are:
secret
: the secret you've shared with the registry for the hookmount
: the url path you expect the hooks to be posted toYou must call listen()
on the restify server yourself. The server object is an event emitter. Attach event listeners to it to act when hooks are fired.
hook
: emitted for all successfully-received notifications. Listen for this event to handle all hooks.hook:error
: emitted on payload errors like missing or invalid signatures.package:star
to handle only starring notifications.See the npm hooks API documentation for the full list of events.
ISC
FAQs
sample code for receiving package hooks from the npm registry
The npm package @rexlabs/npm-hook-receiver receives a total of 0 weekly downloads. As such, @rexlabs/npm-hook-receiver popularity was classified as not popular.
We found that @rexlabs/npm-hook-receiver demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 25 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.