
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
archetype-node-v2
Advanced tools
The Archetype Node library provides convenient access to the Archetype API from applications written in Node. It includes a pre-defined set of classes for API resources that initialize themselves dynamically from API responses which makes it compatible with a wide range of versions of the Archetype API.
The SDK has everything you need to build and manage API subscriptions, usage-based billing, tracking metered usage, issue volume based discounts, graduated pricing models and more.
Archetype is the revenue infrastruce that make API monetization quick and painless. It works by integrating powerful, reliable purchase server with cross-platform support. Our open-source framework provides a backend and a wrapper around payment processors like Stripe to save engineers months from having to build custom billing infrastructure for their APIs.
Whether you are building a new API or already have millions of customers, you can use Archetype to:
Sign up to get started.
If looking to use our APIs directly, the API reference is here.
With Archetype, you can keep track of all your app transactions in one place — whether your customers are charged through iOS, Android, or the web. As the single source of truth for your API business, we make sure your customers' subscription status is always up to date.
Explore the docs and view the quickstart guide
You don't need this source code unless you want to modify the package. If you just want to use the package, just run:
yarn add @archetypeapi/node
or
npm install @archetypeapi/node
Node 12.x.x+
The library needs to be configured with your account's app_id and secret key which is available in your Archetype Dashboard. Set archetype.app_id and archetype.secret_key to their values:
const express = require("express");
const router = express.Router();
const { ArchetypeApi } = require("@archetypeapi/node");
const appId = process.env.APP_ID; // find in your Archetype Dashboard
const secretKey = process.env.SECRET_KEY; // find in your Archetype Dashboard
const Archetype = ArchetypeApi(appId, appSecret);
// create customer
const customer = Archetype.Customer.create("CUSTOM_UID");
// list customers
const customers = Archetype.Customer.all()
// log the first customer's email
console.log(customers[0]["email"]);
// retrieve specific Customer
const customer = Archetype.Customer.retrieve("CUSTOM_UID");
// log that customer's email
console.log(customer["email"]);
// Track a Metered Usage
Archetype.BillableMetric.logUsage(
"YOUR_CUSTOMER_ID",
"BILLABLE_METRIC_ID",
100 // amount (Float)
)
// Authorize an Express Request with Archetype Middelware
const express = require('express')
const { Auth } = require('@archetypeapi/node')
const app = express()
const appId = process.env.APP_ID; // find in your Archetype Dashboard
const secretKey = process.env.SECRET_KEY; // find in your Archetype Dashboard
const ArchetypeAuth = Auth(appId, appSecret);
app.get('/a', ArchetypeAuth, (req, res) => {
res.send('Success!')
})
You can leverage the SDK to create and configure billable metrics, products, token management, authorization and more. Check out the docs for more examples and use cases.
FAQs
Your Node.js SDK
We found that archetype-node-v2 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.