
Security News
Socket Releases Free Certified Patches for Critical vm2 Sandbox Escape
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.
@sap/ucl-provider
Advanced tools
    The ucl-provider is an npm package that provides the APIs necessary for exposing UCL systems, packages and services.
The UCL is working with cert and key. In BAS this is transperent to the user as it happens behind the scenes
    To add this package as a dependency in your package.json file, under the "dependencies" section, add the following dependency: "@sap/ucl-provider": [Version]
Description: Provides a list of UCL systems.
Signature:
async getSystems(): Promise<UclSystemProviderSystem[]>
Input: none.
Output: A list of UCL Systems.
Description: Retrieves an instance of the UCL Service Retriever implementation of the ServiceRetriever interface.
Signature:
getServiceRetriever(): UclServiceRetrieverInterface
Input: none.
Output: An instance that implements the UclServiceRetrieverInterface.
Description: Provides a list of the UCL system's packages.
Signature:
getPackages(): Promise<UclPackageProviderSystem[]>
Input: none.
Output: A list of the UCL system's packages.
Description: Provides a list of UCL services.
Signature:
async getServices(): Promise<Service[]>
Input: none.
Output: A list of services.
Description: Provides the metadata of the UCL service.
Signature:
async getMetadata(
service: Service,
encoding: EncodingMode,
): Promise<ServiceMetadata>
Input:
    service: The details of the service that you want to get the metadata for.
    encoding: For metadata, you should use EncodingMode.XML.
Output: An object that contains the metadata XML string of the service.
Description: Provides live data from the UCL service.
Signature:
async getJsonLiveData(
service: Service,
destName: string,
entityName: string,
options?: Record<string, any>): Promise<ServiceCommon>
Input:
    service: The details of the service that you want to get the live data for.
    destName: The destination name of the live data.
    entityName: The name of the entity in the service that you want the live data for.
    options: Accepts the following parameters:
        filter (optional): Provides query parameters to pass to the service. For example:
            new Filter(new Map([[ServiceRequestKey.TopRows, "2""]]))
Output: An object that contains a JSON string with live data from the service.
    1. To create a key and certificate in UCL Canary, see this wiki..
        Note that the WS_BASE_URL in the lunch.json should be directed to UCL canary for the test flow to work.
    2. See a sample flow of ucl-provider APIs here.
FAQs
ucl-provider
The npm package @sap/ucl-provider receives a total of 86,171 weekly downloads. As such, @sap/ucl-provider popularity was classified as popular.
We found that @sap/ucl-provider demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.

Research
Five malicious NuGet packages impersonate Chinese .NET libraries to deploy a stealer targeting browser credentials, crypto wallets, SSH keys, and local files.

Security News
pnpm 11 turns on a 1-day Minimum Release Age and blocks exotic subdeps by default, adding safeguards against fast-moving supply chain attacks.