
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@zaplier/sdk
Advanced tools
Advanced privacy-first tracking SDK with session replay, heatmaps, and anti-adblock technology
Advanced privacy-first tracking SDK with session replay, heatmaps, and anti-adblock technology.
Makes a website visitor identifier from a browser fingerprint with enhanced session recording capabilities. Unlike cookies and local storage, fingerprint stays the same in incognito/private mode and even when browser data is purged. 100% cookieless analytics tracking with GDPR/LGPD compliance, advanced bot detection, session replay, and heatmaps.
Get a workspace token:
npm i @zaplier/sdk
# or
yarn add @zaplier/sdk
import { Zaplier } from "@zaplier/sdk";
// Initialize the SDK
const zaplier = Zaplier.init({
token: "your-workspace-token",
heatmap: true,
replay: true,
debug: true, // Enable for development
});
// Track page views (automatic)
// Page views are tracked automatically
// Track conversions
zaplier.trackPurchase({
value: 99.99,
currency: "USD",
items: [{ id: "product-123", name: "Product Name" }]
});
// Track custom events
zaplier.track("button_click", {
button_id: "signup",
page: "homepage",
});
// Identify users
zaplier.identify({
email: "user@example.com",
name: "John Doe"
});
// Get visitor data
console.log("Visitor ID:", zaplier.getVisitorId());
<script src="https://cdn.jsdelivr.net/npm/@zaplier/sdk@1/dist/sdk.min.js"
data-token="your-workspace-token"
data-heatmap="true"
data-replay="true"></script>
<script>
// SDK is automatically initialized from data attributes
// Track custom events
Zaplier.track("page_interaction", {
element: "header_button",
action: "click",
});
// Track conversions
Zaplier.trackPurchase({
value: 99.99,
currency: "USD",
items: [{ id: "product-123", name: "Product Name" }]
});
// Get visitor identifier
console.log("Visitor ID:", Zaplier.getVisitorId());
</script>
Zaplier.init({
token: 'your-workspace-token', // Required: Your workspace token
heatmap: true, // Enable heatmap tracking
replay: true, // Enable session replay
debug: false, // Enable debug mode
gdprMode: false, // Enable GDPR compliance mode
allow_localhost: false // Allow tracking on localhost
});
Zaplier.init(config) - Initialize the SDKZaplier.track(eventType, data?) - Track custom eventsZaplier.trackPageView(data?) - Track page viewsZaplier.trackConversion(type, value?, currency?, metadata?) - Track conversionsZaplier.identify(userData) - Identify usersZaplier.getVisitorId() - Get current visitor IDZaplier.heatmap.enable() - Enable heatmap trackingZaplier.heatmap.disable() - Disable heatmap trackingZaplier.heatmap.isRecording() - Check if recordingZaplier.replay.start() - Start session recordingZaplier.replay.stop() - Stop session recordingZaplier.replay.isRecording() - Check if recordingThe SDK automatically uses multiple transport methods to ensure data delivery:
Note that you need to replace your-workspace-token with a workspace token from the dashboard.
FAQs
Advanced privacy-first tracking SDK with session replay, heatmaps, and anti-adblock technology
The npm package @zaplier/sdk receives a total of 124 weekly downloads. As such, @zaplier/sdk popularity was classified as not popular.
We found that @zaplier/sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.