
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@uwdata/citation-query
Advanced tools
Retrieve paper citatation data from doi.org and Semantic Scholar.
Retrieve paper citatation data from doi.org and Semantic Scholar.
Requires at least Node.js v14.14.0.
npm install @uwdata/citation-query
@uwdata/citation-query
is an ESM-only module - you are not able to import it with require()
.
import { lookupDOI } from '@uwdata/citation-query';
const doiData = await lookupDoi('10.1111/cgf.13720');
For a full list of available paper fields, see the Semantic Scholar API documentation.
import { lookupS2, urlS2 } from '@uwdata/citation-query';
// paper fields to retrieve
const params = {
fields: ['externalIds', 'title', 'authors', 'year', 'venue']
}
// using a DOI
const s2DataFromDOI = await lookupS2('10.1111/cgf.13720', params);
// using an S2ID (Semantic Scholar ID)
const s2id = 'fe1ea23231e63bdc8738635046e21d7e655e55f2';
const s2DataFromS2ID = await lookupS2(s2id, params);
// generate a URL for the Semantic Scholar REST API
const url = urlS2(s2id, params);
Given a DOI, return JSON data to standard output.
doi 10.1111/cgf.13720
Given a paper id (DOI, S2ID, etc.) return JSON data to standard output.
Retrieve a default set of fields using an S2ID:
s2id fe1ea23231e63bdc8738635046e21d7e655e55f2
Retrieve a default set of fields using a DOI:
s2id 10.1111/cgf.13720
Retrieve a custom set of fields:
s2id fe1ea23231e63bdc8738635046e21d7e655e55f2 title,year,venue
FAQs
Retrieve paper citatation data from doi.org and Semantic Scholar.
The npm package @uwdata/citation-query receives a total of 0 weekly downloads. As such, @uwdata/citation-query popularity was classified as not popular.
We found that @uwdata/citation-query demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.