
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
adorable-avatars
Advanced tools
[](https://travis-ci.org/adorableio/avatars-api-middleware)
This repository contains the express middleware that can be used to host your own avatars service!
Check out our website for more info on (and an interactive demo of) what this service does.
First, you'll need the adorable-avatars
package:
npm install adorable-avatars --save
Then, use the router middleware within your application:
// your_server.js
import express from 'express';
import avatarsMiddleware from 'adorable-avatars';
const myApp = express();
myApp.use('/myAvatars', avatarsMiddleware);
That's it! Your server now includes the avatars endpoints!
Assuming your server lives at myserver.com
, and you've configured the middleware as above, you now have the following endpoints:
myserver.com/myAvatars/:id
id
.id
can be anything (email, username, md5 hash, as long as it's a valid URI)myserver.com/myAvatars/:size/:id
id
at the specified size
myserver.com/myAvatars/face/:eyes/:nose/:mouth/:color/:size?
myserver.com/myAvatars/face/eyes1/nose2/mouth4/DEADBF/300
myserver.com/myAvatars/list
myserver.com/myAvatars/:size?/random
myserver.com/myAvatars/300/random
If you're developing locally, you'll first need to bootstrap (assumes nvm):
# use correct node version
nvm use
# install dependencies
npm install
Then, there are several npm scripts that will be useful:
# run the unit tests
npm test
# run both a dev server and eslint
npm run dev
# run a dev server
npm run dev:server
# run eslint
npm run dev:lint
# compile the application
npm run build
Please read the contributors' guide
FAQs
[](https://travis-ci.org/adorableio/avatars-api-middleware)
The npm package adorable-avatars receives a total of 4 weekly downloads. As such, adorable-avatars popularity was classified as not popular.
We found that adorable-avatars demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.