
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
apollo-server-autoloader
Advanced tools
This package enables autoloading of schemas, resolvers and datasources based on configurable naming conventions.
npm i apollo-server-autoloader
# or
yarn add apollo-server-autoloader
The following example asumes, that you define your types, resolvers and datasources in the api folder of your project.
import * as path from 'path'
import { buildFederatedSchema } from '@apollo/federation'
import { ApolloServer } from '...'
import { Autoloader } from 'apollo-server-autoloader'
const autoloaderConfig = {
searchPaths: [path.resolve(__dirname, 'api')]
}
const createServer = async () => {
import autoloader = Autoloader(autoloaderConfig)
const typeDefs = await autoloader.getTypeDefs()
const resolvers = await autoloader.getResolvers()
const datasources = await autoloader.getDatasources()
return new ApolloServer({
dataSources,
schema: buildFederatedSchema([{ typeDefs, resolvers }])
...
});
}
interface AutoloaderConfig {
// (required) search paths
searchPaths: string[]
// naming conventions
conventions?: FileNamingConventions
// which file extensions should be considered
fileExtensions?: string[]
// which files should be excluded (regex)
exclude: string[]
}
interface FileNamingConventions {
// naming conventions for schema files
types?: NamingConvention
// naming conventions for resolver files
resolvers?: NamingConvention
// naming conventions for datasource files
datasources?: NamingConvention
}
interface NamingConvention {
// The "key" is the pattern for the file name
// The ExportPattern is the pattern for the export variable
// If your schemas for example are located in files
// which are named "schema.ts" and they provide an export
// variable named "typeDef" the naming convention would look like follows:
// { schema: 'typeDef' }
[key: string]: ExportPattern
}
Asume your project structure looks like follows:
|- /api
|- |- schemaFile.ts
|- |- queriesFile.ts
|- |- mutationsFile.ty
|- |- DatasourceFile.ts
|- |- /subolder
|- |- |- schemaFile.ts
...
Your file exports look like follows:
// schemaFile.ts
export const myTypeDef = gql`...`
// queriesFile.ts
export const myQueries = { ... }
// mutationsFile.ts
export const myMutations = { ... }
// DatasourceFile.ts
export class MyDatasource { ... }
In this case the corresponding config for the autoloader should look like follows:
const config = {
searchPaths: [path.resolve(__dirname, 'api')],
conventions: {
types: {
schemaFile: 'myTypeDef',
},
resolvers: {
queriesFile: 'myQueries',
mutationsFile: 'myMutations',
},
datasources: {
DatasourceFile: 'MyDatasource',
}
},
fileExtensions: ['.ts'],
exclude: ['[^\/]+\.(spec|test)', '__tests__'],
}
The default config for the autoloader looks like follows:
export const defaultConfig: AutoloaderConfig = {
searchPaths: ['.'],
conventions: {
types: { schema: 'typeDef' },
resolvers: { queries: 'queries', mutations: 'mutations' },
datasources: { Datasource: 'Datasource' },
},
fileExtensions: ['ts']
}
If you don't change the config, this means you must name your schema files schema.ts, your resolver files queries.ts or mutations.ts and your datasource files Datasource.ts. The export for schema files must be named typeDef, for resolver files queries or mutations and Datasource for datasource files.
FAQs
auto loading schemas, resolvers and datasources
The npm package apollo-server-autoloader receives a total of 0 weekly downloads. As such, apollo-server-autoloader popularity was classified as not popular.
We found that apollo-server-autoloader demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.