
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@squaredup/plugin-common
Advanced tools
This is a module that contains common functions that can be used by all SquaredUp Plugins.
Important to note the no future change can be allowed to break any existing functionality, versioning must be properly maintained in package.json.
collectSuccessfulResponses : Takes in a list of promises (usually API responses) and returns only the ones that were successful (deprecated)flattenObjectArrayProps : Flattens single-item array properties in an array of objects to a single non-array valuecategorizeObjectArrayByProp : Categorizes an array of objects into separate properties of an object based on a property on each objectcollectResponses : Takes in a list of promises (usually API responses) and returns information about successful and failed responsesprocessStandardDataStreamMessages : a helper routine to report errors returned by collectResponses() in a standard formatdeGremlin : a helper function to extract individual property values from a 'vertex', use flattenObjectArrayProps for full verticesgetBase64Auth : a helper function for encoding usernames and passwords to base64 for Authorization headerspageAPI : a helper function that generates functions that can be used to manage pagingContext in import operationsisValidEdge: a helper function that validates whether an edge is in an appropriate format or notisValidVertex: a helper function that validates whether a vertex is in an appropriate format or notwarningTracker : a helper function that generates functions that can be used to track warnings sent to usersgeneratePkcePair : a helper function that generates a challenge code and verifier for use with PKCEgenerateAxiosRequestLogInterceptors : a helper function that generates interceptors for axios that log requests consistently
generateAxiosResponeLogInterceptors : a helper function that generates interceptors for axios that log responses consistently
FAQs
Common functions that can be used by any plugin
The npm package @squaredup/plugin-common receives a total of 4 weekly downloads. As such, @squaredup/plugin-common popularity was classified as not popular.
We found that @squaredup/plugin-common demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.