Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
ampersand-sync
Advanced tools
Provides sync behavior for updating data from ampersand models and collections to the server.
Standalone, modern-browser-only version of Backbone.Sync as Common JS module.
Part of the Ampersand.js toolkit for building clientside applications.
You probably won't use this directly, but it is used by ampersand-model and ampersand-rest-collection to provide the REST functionality.
As of v4.0 works in browsers and Node.js
IE9+ and any other browser.
Might work in IE8, but it's not officially supported.
npm install ampersand-sync
var sync = require("ampersand-sync")
var rawRequest = sync(method, model, options)
method is a string used for choosing HTTP verb of the sync request. It has to be chosen from the keys of the following map:
{
'create': 'POST',
'update': 'PUT',
'patch': 'PATCH',
'delete': 'DELETE',
'read': 'GET'
}
model (optional) is an ampersand-model object or equivalent. ajaxConfig
and url
fields of the model are used (if present) to override default options for the request. (for details on ajaxConfig see below)
If model is provided, model.toJSON
is called and the result is used as body for create, update and patch methods.
When the request is made, request
event is triggered on the model with arguments: (model, XMLHttpRequest, options, ajaxSettings)
where ajaxSettings is the final configuration passed to http request implementation. In Node.js, object returned from request()
will be passed in instead of XMLHttpRequest
, so streaming is possible.
If model is null, some options are required to form a correct http request. Please apply common sense.
options (optional) are used to override any settings for the http request and provide callbacks for the results or errors.
rawRequest is returned. In the browser, it is an XMLHttpRequest object instance, in Node.js it's the object returned by request()
.
both ajaxConfig
and options
can contain any and all of the options that xhr or request accepts.
Additional fields in ajaxConfig
:
xhrFields
key that contains all fields which should be added to the raw XMLHttpObject before it's sent. xhrFields
is only used in the browser and has no effect in node.Additional fields in options
:
false
false
success(body, 'success', responseObject)
- optional callback to be called when request finishes successfullyerror(responseObject, 'error', error.message)
- optional callback to be called when an error occurs (http request/response error or parsing response error)always(error, responseObject, body)
- optional callback to be called when request finishes no matter what the resultnpm test
Tests are written in tape and since they require a browser environment it gets run in a headless browser using phantomjs via tape-run. Make sure you have phantomjs installed for this to work.
You can also run npm start
then open a browser.
Version 4 supports making requests in Node.js as well as browser. xhr is used in the browser and request in node, but you can substitute the request making code with your on implementation as well.
var sync = require("ampersand-sync/core")(whateverXhrYouWant)
For details on 4.0 release see v4.0 milestone
In moving from 1.0.1 to 1.0.2 we switched the underlying ajax implementation from jQuery's ajax to xhr. This changed slightly the options, as well as how ajaxConfig
in models/collections operated when configured as a function.
Previously ajaxConfig
would be passed the current ajax parameters object for modification, now it receives no arguments and should just return options to be merged in to the ajax parameters which will be passed to xhr.
This should have been a major release both for this module and its dependents (ampersand-model, ampersand-rest-collection, ampersand-collection-rest-mixin), but unfortunately we made a mistake and published as 1.0.2, and were too slow to rollback our mistake before workarounds were in place.
As such we are leaving the current 1.0.x versions in place, but deprecated, and suggest people upgrade to the latest versions of model/collection when they can which will contain the new implementation of xhr.
This should only affect your if you're using ajaxConfig
as a function. If so you'll need to return the options you want to add, rather than expecting to be passed a params object to your ajaxConfig function. If you're having trouble ping us in freenode #&yet or on twitter: @philip_roberts & @henrikjoreteg.
All credit goes to Jeremy Ashkenas and the other Backbone.js authors.
The ampersand-sync
you are using today was made available to you by all the contributors listed here: https://github.com/AmpersandJS/ampersand-sync/graphs/contributors
MIT
FAQs
Provides sync behavior for updating data from ampersand models and collections to the server.
The npm package ampersand-sync receives a total of 7,429 weekly downloads. As such, ampersand-sync popularity was classified as popular.
We found that ampersand-sync demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.