
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
ACR Cloud is a service that provides a cloud solution for audio fingerprinting and recognition. On their SDK and Tools section you can find Android, iOS, Java, Python, C# and C++ libraries.
There is also a web api and that is the one this library is build on top.
This package is available on npm registry:
npm install --save arc-cloud
First of all you have to require and make an instance of ACRCloud with the correct access key and secret:
var ACRCloud = require( 'acr-cloud' );
var acr = new ACRCloud({
// required
access_key: XXXXX,
access_secret: XXXXX,
// optional
requrl: 'ap-southeast-1.api.acrcloud.com',
http_method: 'POST',
http_uri: '/v1/identify',
data_type: 'audio',
signature_version: '2',
timestamp: Date.now()
});
This instance will provide you 4 methods:
createSignature()When this method is called it will encrypt the http_method, http_uri, access_key, data_type, signature_version and timestamp using the access_secret as seed.
This method is a promise and will resolve it with the encrypted value but it will also keep an internal property called string_to_sign that is the unencrypted values.
createPostData( buffer, signature )createSignatureThis method is a promise that will resolve itself with an object containing the array of parameters to be used on the POST call and the query generated by this array.
post( postData )This method will do nothing but make a POST request with the postData and resolve itself returning the POST response.
identify( buffer )identify() is the main method of this module. It will call the previous described methods in the right order and handle all the process, the only thing you have to do is to feed it with the base64 encoded audio file.
This method is a promise and it will resolve itself returning the post response.
There is a working version of this library on the folder example on this repository. Check it out for more detail.
FAQs
ACR Cloud library
We found that acr-cloud demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.