Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
binder-client
Advanced tools
Command line tool for managing Binder services: build, register, launch. Implements both a programmatic interface and a CLI interface for the protocol specification in binder-protocol
.
Make it easy to mix and match use cases and environments: local or cloud deployment, building images or launching images directly, etc.
npm install binder-client -g
This module can be imported as a module, or used directly from the CLI (and the usage is pretty much the same in both cases). Every method that's exposed by the client takes at least a host and a port as parameters, and authorized endpoints also require an API key.
The client can communicate with any endpoint in the Binder API using the following format (see examples):
binder (build|registry|deploy) (command) [options]
binder.(build|registry|deploy).(command)(options, function (err, result) {
...
})
Unauthorized commands don't require an API token
binder deploy deploy binder-project-example-requirements --host='deploy.mybinder.org' --port=8084'
Endpoints are specified as camel-case in binder-protocol
, but they should be translated to kebab-case before use with the client:
binder registry fetch-all --host='build.mybinder.org' --port=8082 --api-token
If an endpoint has GET query parameters (i.e. binder registry fetch
) they are specified as additional CLI arguments
binder registry fetch binder-project-example-requirements <deploy-id> --host='local' -api-token='blah'
Translating CLI commands into programmatic API commands is straightforward (CLI arguments just need to be inserted into an options object):
To start building an image/template for a repository:
var buildOpts = {
host: '<build server host>',
port: 8082,
apiKey: <api key>,
repository: '<repo name>'
}
binder.build.start(buildOpts, function (err, status) {
...
})
To query the status of a single build:
var buildOpts = {
host: '<build server host>',
port: 8082,
apiKey: <api key>,
repository: '<repo name>'
}
binder.build.status(buildOpts, function (err, status) {
...
})
FAQs
command-line tool to manage binder services
The npm package binder-client receives a total of 2 weekly downloads. As such, binder-client popularity was classified as not popular.
We found that binder-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.