Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
async-stripe
Advanced tools
Convenient rust bindings and types for the Stripe HTTP API aiming to support the entire API surface. Not the case? Please open an issue.
See the rust api docs, the examples, or payments.rs.
async-stripe
is compatible with the async-std
and tokio
runtimes and the native-tls
and rustls
backends. When adding the dependency, you much select a runtime feature.
[dependencies]
async-stripe = { version = "0.14", features = ["runtime-tokio-hyper"] }
runtime-tokio-hyper
runtime-tokio-hyper-rustls
runtime-blocking
runtime-blocking-rustls
runtime-async-std-surf
Additionally, since this is a large library, it is possible to conditionally enable features as required to reduce compile times and final binary size. Refer to the Stripe API docs to determine which APIs are included as part of each feature flag.
# Example: Core-only (enough to create a `Charge` or `Card` or `Customer`)
async-stripe = { version = "*", default-features = false, features = ["runtime-async-std-surf"] }
# Example: Support for "Subscriptions" and "Invoices"
async-stripe = { version = "*", default-features = false, features = ["runtime-async-std-surf", "billing"] }
The latest supported version of the Stripe API is 2020-08-27
.
Set the corresponding crate version depending on which version of the Stripe API you are pinned to.
If you don't see the specific version you are on, prefer the next available version.
0.14
- stripe version 2020-08-27
0.12
- stripe version 2019-09-09
We currently have 1.54.0
pinned in CI, so any version of rustc newer than that should work.
If this is not the case, please open an issue. As a policy, we permit MSRV increases in non-breaking releases.
See CONTRIBUTING.md for information on contributing to async-stripe.
This project started as a fork of stripe-rs. We would not be here without them! :)
Licensed under either of
at your option.
Version 0.14.0 (March 22, 2022)
This release has been focused on refining the ergonomics supporting additional stripe APIs, and adding retries / idempotency.
card
param to the codegen. (@erichCompSci)Default
across the codebase.In addition we have expanded the test coverage, and will continue to do so with more examples.
FAQs
API bindings for the Stripe HTTP API
The npm package async-stripe receives a total of 3 weekly downloads. As such, async-stripe popularity was classified as not popular.
We found that async-stripe demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.