Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@shopify/app-bridge
Advanced tools
[![Build Status](https://travis-ci.com/Shopify/app-bridge.svg?token=RBRyvqQyN525bnfz7J8p&branch=master)](https://travis-ci.com/Shopify/app-bridge) [![codecov](https://codecov.io/gh/Shopify/app-bridge/branch/master/graph/badge.svg?token=nZ21m39Dr6)](https:
The App Bridge enables Apps on Shopify to access native Shopify features across different platforms.
yarn add @shopify/app-bridge
Import the client library from the app-bridge
package and provide configuration:
import createApp, {getShopOrigin} from '@shopify/app-bridge';
const app = createApp({
apiKey: 'my api key from partner dashboard',
shopOrigin: getShopOrigin(),
});
A list of available actions can be found in the actions source folder.
yarn build
build the files into CommonJS into the lib
and ES6 inside thelib-esm
folder with source mapyarn start
build a development version of the libraries, and run the test app inside test
yarn watch
build a development version of the libraries and automatically rebuild when files have changedyarn clean
remove the lib
and lib-esm
foldersyarn lint
run the linteryarn check
run typescript checkingyarn test
run all tests using jest
yarn test:watch
run all tests in watch mode and auto-run on changesyarn test:coverage
run all tests and generate coverage reportTo enable automatic prettier formatting copy or link the pre-commit script to
.git/hooks/pre-commit
and make sure it's executable, e.g.:
ln -s -f ../../scripts/pre-commit .git/hooks/pre-commit
FAQs
**[Join our team and work on libraries like this one.](https://www.shopify.ca/careers)**
The npm package @shopify/app-bridge receives a total of 63,419 weekly downloads. As such, @shopify/app-bridge popularity was classified as popular.
We found that @shopify/app-bridge demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 25 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.