Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
botkit-ryver-connector
Advanced tools
Botkit connector for Ryver.
An outbound webhook must be configured in Ryver for this bot to capture and respond to events/messages.
Choose the following events for handling specific actions
chat_created
- for DMs and Team/Forum chatspostcomment_created
- for post commentstaskcomment_created
- for task commentsAs outbound webhook events are sent to the bot, this botkit connector will modify some of the event types to match the botkit standard during the pipeline's categorize stage.
direct_message
message type.@mention
will be categorized as the direct_mention
message type.@mention
will be categorized as the mention
message type.ambient
message type.By default all webhooks that resulted from any action by the Ryver bot user will be supressed by this botkit connector.
If you wish to capture these events you will need to add the config option allowBotOriginatedMessages: true
.
Doing so will result in bot messages being processed like any other message (such as categorization) so you may also need to include logic in your controller.hears()
and controller.on()
functions to ensure you are not responding to your own bot's message. This can be determined using the bot.identity
object.
If you wish to use botkit to handle your slash-commands as well, you can simply configure your slash command in Ryver to use the same URL as the webhook. The botkit message type for these will be command
.
One unique aspect to commands is that the Ryver request must be responded to within a short timeframe or Ryver will show the user an error message. Every command handler should use a special reply function to send an immediate response, and then if required can perform longer-running work and optionally send additional replies.
controller.hears('^/mycommand', 'command', function (bot, message) {
bot.replyImmediate(message, 'Processing your command now...');
// some longer running process could occur here, such as making http requests.
bot.reply(message, 'The process is now complete');
})
As well as the standard bot.say()
and bot.reply()
functions, we've included some addition functions for ease of development.
bot.sendPostComment(text, postId, cb);
bot.sendTaskComment(text, taskId, cb);
bot.sendForumChatMessage(text, forumId, ephemeralUserId, cb);
bot.sendWorkroomChatMessage(text, workroomId, ephemeralUserId, cb);
bot.sendDirectChatMessage(text, userId, isEphemeral, cb);
Additionally, during the start-up phase we load the bot's identity from Ryver and set it on the bot:
var botUserId = bot.identity.id;
var username = bot.identity.name;
Ryver does not support buttons
or quick_replies
yet.
FAQs
Botkit connector for Ryver
The npm package botkit-ryver-connector receives a total of 4 weekly downloads. As such, botkit-ryver-connector popularity was classified as not popular.
We found that botkit-ryver-connector demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.