
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
yarn add apiaudio or npm install --save apiaudio
It can be used by a singular import or modular imports.
import apiaudio from "apiaudio";
apiaudio.configure(...);
apiaudio.Script.list();
import apiaudio, { Script, Voice, Speech } from "apiaudio";
apiaudio.configure(...);
Script.list();
apiaudio can optionally sign the webhook events it sends to your endpoint, allowing you to validate that they were not sent by a third-party.
Please note that you must pass the raw request body, exactly as received from apiaudio, to the verify() or verifyAsync() functions; this will not work with a parsed (i.e., JSON) request body.
verify() can be used in server instances (backend), whereas verifyAsync() is designed for web instances (frontend.)
import { Webhooks } from "apiaudio";
Webhooks.verify(
(payload = "event body sent by apiaudio as a string"),
(header = "event's X-Aflr-Secret header"),
(secret = "your webhook secret"),
(tolerance = "tolerance in seconds, defaults to 300, optional"),
(cryptoProvider = "alternative crypto provider, optional")
);
Webhooks.verifyAsync(
(payload = "event body sent by apiaudio as a string"),
(header = "event's X-Aflr-Secret header"),
(secret = "your webhook secret"),
(tolerance = "tolerance in seconds, defaults to 300, optional"),
(cryptoProvider = "alternative crypto provider, optional")
);
npm version <version_type>
version_type can be: major, minor or patch
then
npm publish
To be able to run the tests, create a .env file and put a valid API_KEY parameter in it. Also see test-config.ts file.
FAQs
api.audio Javascript SDK
We found that apiaudio demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.