Research
Security News
Malicious npm Package Typosquats react-login-page to Deploy Keylogger
Socket researchers unpack a typosquatting package with malicious code that logs keystrokes and exfiltrates sensitive data to a remote server.
apollo-server-env
Advanced tools
Package description
The apollo-server-env package provides a cross-platform way to interact with the environment and system resources in a Node.js server environment, specifically tailored for Apollo Server. It abstracts away differences between environments, such as local development environments and various production environments, making it easier to write isomorphic code that runs both on the server and the client.
Fetch API
Provides a cross-platform Fetch API implementation for making network requests. This is useful for server-side data fetching and interacting with APIs.
import { fetch } from 'apollo-server-env';
fetch('https://example.com/data').then(response => response.json()).then(data => console.log(data));
URL and URLSearchParams
Offers a way to work with URLs and URL query strings, making it easier to manipulate and query URL parameters.
import { URL, URLSearchParams } from 'apollo-server-env';
const url = new URL('https://example.com?search=apollo');
const params = new URLSearchParams(url.search);
console.log(params.get('search'));
Headers
Provides a way to create and manage HTTP headers, which is useful for configuring requests and responses in network operations.
import { Headers } from 'apollo-server-env';
const headers = new Headers();
headers.append('Content-Type', 'application/json');
console.log(headers.get('Content-Type'));
node-fetch is a lightweight module that brings window.fetch to Node.js. While apollo-server-env provides a fetch API among other utilities, node-fetch focuses solely on implementing the Fetch API in Node.js environments.
whatwg-url is a package that implements the URL and URLSearchParams interfaces according to the WHATWG URL Standard. Unlike apollo-server-env, which includes URL handling as part of a broader set of functionalities, whatwg-url specializes in URL manipulation.
cross-fetch is a cross-browser/cross-environment fetch API, which provides polyfill for the Fetch API for use in browsers, Node.js, and React Native. It offers similar functionality to the fetch part of apollo-server-env but is designed for a wider range of environments.
Readme
apollo-server-env
This package is used internally by Apollo Server and not meant to be consumed directly.
Its primary function is to provide polyfills (e.g. via
core-js
) for newer language features which might
not be available in the underlying JavaScript Engine (i.e. more bare-bones V8
environments, older versions of Node.js, etc.).
FAQs
Unknown package
We found that apollo-server-env demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers unpack a typosquatting package with malicious code that logs keystrokes and exfiltrates sensitive data to a remote server.
Security News
The JavaScript community has launched the e18e initiative to improve ecosystem performance by cleaning up dependency trees, speeding up critical parts of the ecosystem, and documenting lighter alternatives to established tools.
Product
Socket now supports four distinct alert actions instead of the previous two, and alert triaging allows users to override the actions taken for all individual alerts.