
Security News
Package Maintainers Call for Improvements to GitHub’s New npm Security Plan
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
@upflowhq/pennylane-client
Advanced tools
A TypeScript client for the Pennylane accounting API V2, automatically generated from the OpenAPI specification.
npm install @upflowhq/pennylane-client
import { OpenAPI, PennylaneService } from 'pennylane-api-client';
// Configure the base URL and authentication
OpenAPI.BASE = 'https://api.pennylane.com/v2';
OpenAPI.TOKEN = 'your-api-token';
// Use the client
async function getCompanies() {
try {
const companies = await PennylaneService.getCompanies();
console.log(companies);
} catch (error) {
console.error('Error fetching companies:', error);
}
}
getCompanies();
The client provides access to all Pennylane API endpoints, organized into services:
Each service contains methods that correspond to API endpoints, with full TypeScript typing and documentation.
This client is automatically generated from the Pennylane OpenAPI specification. The generation process is automated via GitHub Actions and runs weekly to ensure the client stays up-to-date with the latest API changes.
To generate the client locally:
npm install
npm run fetch-spec
npm run generate
npm run build
pennylane-client/
├── .github/workflows/ # GitHub Actions workflows
├── scripts/ # TypeScript build scripts
├── src/ # Generated client source code
├── package.json # Project configuration
├── tsconfig.json # TypeScript configuration
└── README.md # This file
FAQs
TypeScript client for Pennylane accounting API V2
The npm package @upflowhq/pennylane-client receives a total of 25 weekly downloads. As such, @upflowhq/pennylane-client popularity was classified as not popular.
We found that @upflowhq/pennylane-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.