
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@xylabs/sdk-meta
Advanced tools
Base functionality used throughout XYO TypeScript/JavaScript libraries
Base functionality used throughout XYO TypeScript/JavaScript libraries
@xylabs/sdk-meta
function getMetaAsDict(obj, parentKey?): Record<string, string>;
string
Record
<string
, string
>
function mergeDocumentHead(destination, source): string;
string
string
string
function metaBuilder(
html,
meta,
handler?): string;
string
string
string
optional description: string;
optional og: OpenGraphMeta;
optional title: string;
optional twitter: TwitterMeta;
optional audio: OpenGraphStructuredProperty;
optional description: string;
optional determiner: string;
optional image: OpenGraphStructuredProperty;
optional locale: string | string[];
optional site_name: string;
optional title: string;
optional type: string;
optional url: string;
optional video: OpenGraphStructuredProperty;
optional : string;
optional alt: string;
optional height: number;
optional secure_url: string;
optional type: string;
optional url: string;
optional width: number;
optional id: object;
optional googleplay: string;
optional ipad: string;
optional iphone: string;
optional name: object;
optional googleplay: string;
optional ipad: string;
optional iphone: string;
optional url: object;
optional googleplay: string;
optional ipad: string;
optional iphone: string;
https://developer.twitter.com/en/docs/twitter-for-websites/cards/overview/markup
optional app: TwitterApp;
optional card: "summary" | "summary_large_image" | "app" | "player";
The card type. Used with all cards. Fallback: og:type. If an og:type, og:title and og:description exist in the markup but twitter:card is absent, then a summary card may be rendered.
optional creator: object;
optional : string;
The
of content creator. Used with summary_large_image cards
optional id: string;
Twitter user ID of content creator. Used with summary, summary_large_image cards
optional description: string;
Description of content (maximum 200 characters). Used with summary, summary_large_image, player cards. Fallback: og:description.
optional image: object;
optional : string;
URL of image to use in the card. Images must be less than 5MB in size. JPG, PNG, WEBP and GIF formats are supported. Only the first frame of an animated GIF will be used. SVG is not supported. Used with summary, summary_large_image, player cards. Fallback: og:image
optional alt: string;
A text description of the image conveying the essential nature of an image to users who are visually impaired. Maximum 420 characters. Used with summary, summary_large_image, player cards
optional player: TwitterPlayer;
optional site: object;
The
optional : string;
optional id: string;
Same as twitter:site, but the user’s Twitter ID. Either twitter:site or twitter:site:id is required. Used with summary, summary_large_image, player cards
of website. Either twitter:site or twitter:site:id is required. Used with summary, summary_large_image, app, player cards
optional title: string;
Title of content (max 70 characters). Used with summary, summary_large_image, player cards. Fallback: og:title.
https://developer.twitter.com/en/docs/twitter-for-websites/cards/overview/player-card
: string;
HTTPS URL to iFrame player. This must be a HTTPS URL which does not generate active mixed content warnings in a web browser. The audio or video player must not require plugins such as Adobe Flash.
optional height: number;
Height of iframe in pixels. Used with player card
optional stream: string;
URL to raw video or audio stream. Used with player card
optional width: number;
Width of iframe in pixels. Used with player card
type OpenGraphStructuredProperty =
| string
| OpenGraphStructured
| (string | OpenGraphStructured)[];
type StringIndexable = object;
[key: string]: any
Part of sdk-js
See the LICENSE file for license details
FAQs
Base functionality used throughout XYO TypeScript/JavaScript libraries
We found that @xylabs/sdk-meta demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.