
Security News
PodRocket Podcast: Inside the Recent npm Supply Chain Attacks
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
@upflowhq/pennylane-client
Advanced tools
A TypeScript client for the Pennylane accounting API V2, automatically generated from the OpenAPI specification.
npm install @upflowhq/pennylane-client
import { OpenAPI, PennylaneService } from 'pennylane-api-client';
// Configure the base URL and authentication
OpenAPI.BASE = 'https://api.pennylane.com/v2';
OpenAPI.TOKEN = 'your-api-token';
// Use the client
async function getCompanies() {
try {
const companies = await PennylaneService.getCompanies();
console.log(companies);
} catch (error) {
console.error('Error fetching companies:', error);
}
}
getCompanies();
The client provides access to all Pennylane API endpoints, organized into services:
Each service contains methods that correspond to API endpoints, with full TypeScript typing and documentation.
This client is automatically generated from the Pennylane OpenAPI specification. The generation process is automated via GitHub Actions and runs weekly to ensure the client stays up-to-date with the latest API changes.
To generate the client locally:
npm install
npm run fetch-spec
npm run generate
npm run build
pennylane-client/
├── .github/workflows/ # GitHub Actions workflows
├── scripts/ # TypeScript build scripts
├── src/ # Generated client source code
├── package.json # Project configuration
├── tsconfig.json # TypeScript configuration
└── README.md # This file
FAQs
TypeScript client for Pennylane accounting API V2
The npm package @upflowhq/pennylane-client receives a total of 25 weekly downloads. As such, @upflowhq/pennylane-client popularity was classified as not popular.
We found that @upflowhq/pennylane-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.