
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@upflowhq/pennylane-client
Advanced tools
A TypeScript client for the Pennylane accounting API V2, automatically generated from the OpenAPI specification.
npm install @upflowhq/pennylane-client
import { OpenAPI, PennylaneService } from 'pennylane-api-client';
// Configure the base URL and authentication
OpenAPI.BASE = 'https://api.pennylane.com/v2';
OpenAPI.TOKEN = 'your-api-token';
// Use the client
async function getCompanies() {
try {
const companies = await PennylaneService.getCompanies();
console.log(companies);
} catch (error) {
console.error('Error fetching companies:', error);
}
}
getCompanies();
The client provides access to all Pennylane API endpoints, organized into services:
Each service contains methods that correspond to API endpoints, with full TypeScript typing and documentation.
This client is automatically generated from the Pennylane OpenAPI specification. The generation process is automated via GitHub Actions and runs weekly to ensure the client stays up-to-date with the latest API changes.
To generate the client locally:
npm install
npm run fetch-spec
npm run generate
npm run build
pennylane-client/
├── .github/workflows/ # GitHub Actions workflows
├── scripts/ # TypeScript build scripts
├── src/ # Generated client source code
├── package.json # Project configuration
├── tsconfig.json # TypeScript configuration
└── README.md # This file
FAQs
TypeScript client for Pennylane accounting API V2
The npm package @upflowhq/pennylane-client receives a total of 98 weekly downloads. As such, @upflowhq/pennylane-client popularity was classified as not popular.
We found that @upflowhq/pennylane-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.