Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
ap3
is a toolkit for creating Atlassian Add-ons with Node.js. Plugins 3 is a new kind of Atlassian add-on framework that works with Atlassian OnDemand applications.
Atlassian Remote Add-ons run inside a web server and communicate with the host Atlassian applications entirely by HTTP. The ap3
package helps you get started developing add-ons quickly, using Node.js and Express as the add-on server.
It's important to understand that Express by itself is a web app framework for Node. ap3
just provides a set of middleware and convenience helpers that make it easier to build Atlassian Add-ons. Specifically, ap3
adds:
atlassian-plugin.xml
. When changes are detected, the add-on is re-registered with the host(s)The fastest way to get started is it install the ap3-cli
tool. The CLI makes it possible to generate an ap3
enabled add-on scaffold very quickly. To install:
npm i -g ap3-cli
Once installed, check out the README.
config.js
atlassian-plugin.xml
The ap3
tools are currently experimental. With that said, feel free to report issues. If you want to learn more about Atlassian's Plugins 3 framework, you can visit https://developers.atlassian.com.
Even though this is just an exploratory project at this point, it's also open source Apache 2.0. So, please feel free to fork and send us pull requests.
FAQs
Atlassian Plugins 3 library for Express
The npm package ap3 receives a total of 12 weekly downloads. As such, ap3 popularity was classified as not popular.
We found that ap3 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.