
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
cf-user-services-local
Advanced tools
Used to tie into CloudFoundry user services for envs when deployed or revert to default envs for local development
Simplifies the process of having your local(default configs) envs in the app and used during local development, but use your Cloud Foundry User Provided service when deployed. (You will need to bind your User Provided service to your app for this to work).
Pass your default configs into this module and have either, the default configs or the cloud foundry user services returned depending on what env you are in.
npm install cf-user-services-local
// These are your apps default configs
// The keys of this `defaultConfigs` object should be named the same as their associated User Provided service in CloudFoundry
var defaultConfigs = {
service1: {
foo: "bar",
beep: "boop"
},
service2: {
bar: "foo",
boop: "beep"
}
}
// Pass your defaults into the module
var configs = require('cf-user-services-local')(defaultConfigs)
console.log(configs);
// → Will return Cloud Foundry user-services if deployed, else will return your default configs
All comments, questions, etc. are encouraged and I ask you to post an issue with them in it.
This Project follows the StandardJS style guide.
To Contribute:
npm install
Kevin Collins |
cf-user-services-local is available under the MIT license.
FAQs
Used to tie into CloudFoundry user services for envs when deployed or revert to default envs for local development
The npm package cf-user-services-local receives a total of 17 weekly downloads. As such, cf-user-services-local popularity was classified as not popular.
We found that cf-user-services-local demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.