Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
appconfig-toggles
Advanced tools
Azure App Configuration is a neat product in the Azure portfolio. What is lacks is a more helpful utility/helper library. ACT tries to cover that case.
You may also want to refer to my Demo for Azure App Configuration toggles using the Node/JS library for a way how to use App Config toggles in a more realistic app (however the example does not use ACT!).
The below assumes a Node environment, and that you have correctly created an Azure App Config toggle (feature flag format). The below example assumes it's called SomeToggle
and is labeled Feature
.
const ACT = require("appconfig-toggles");
const { AppConfigToggles } = ACT;
const config = {
connectionString:
"Endpoint={LONG_URL};Secret={LONG_SECRET}",
toggles: [
{
toggleName: ".appconfig.featureflag/SomeToggle",
toggleLabel: "Feature",
}
],
};
const userGroup = "SomeGroup";
async function togglesDemo() {
const act = new AppConfigToggles(config, userGroup);
await act.init();
console.log(act.canUseToggle("SomeToggle"));
console.log(act.getToggleDescription("SomeToggle"));
}
togglesDemo();
canUseToggle()
Check if a toggle is active. This check verifies group access, rollout for this group, and whether the toggle exists at all.
Example: act.canUseToggle("SomeToggle")
getToggleDescription()
Get the description for a named toggled. Good if you, for example, would want that to contain data an application can act on.
Example: act.getToggleDescription("SomeToggle")
Install ACT with npm install appconfig-toggles -S
or yarn add appconfig-toggles -S
.
FAQs
Make better use of Azure App Configuration with Node
The npm package appconfig-toggles receives a total of 0 weekly downloads. As such, appconfig-toggles popularity was classified as not popular.
We found that appconfig-toggles demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.