
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
challonge-ts
Advanced tools
An overdone Challonge API interface and adapter, written with Typescript but should work in ES6+ too.
The adapter is a direct stateless interface with Challonge, with no frills, you're calling the Challonge API directly.
The following returns the direct raw response from the Challonge API
import { TournamentAdapter } from 'challonge-ts';
const test = async () => {
const data = await TournamentAdapter.index('api_key');
console.log(data);
}
test(); // Direct response from the API, array of tournament JSON objects
Due to the direct nature of these adapters, I recommend looking at both the Challonge API documentation for the routes, and the ChallongeTS documentation
Devised as a nicer abstraction over the adapter, this is a set of classes which wrap the adapter in a more OO type way, if that's your thing.
import { Challonge } from 'challonge-ts';
const test = async () => {
const challonge = new Challonge('api_key')
const tournaments = await challonge.getTournaments();
console.log(tournaments); // Array of Tournament objects
}
test();
The tests for this are written using Jest, and uses Nock Record to stub the API requests to Challonge. To run them do the following:
api_key.txt file in the tests folder, containing an api key which matches the nock files if running offline, or your live api key if regenerating the nock files. In the case of the master branch, the file should just contain test_api_keynpm test in the console.To regenerate the API nock files, delete the tests/adapter/__nock-fixtures__ folder and re-run the tests. With a valid API key, the files should be regenerated. Once the tests pass and the files have been generated, remember to do a find and replace for your API key to test_api_key to ensure you don't push your public Challonge API key to a public repo!
Ensure you have gulp-cli installed locally, then run npm run build. Hopefully it goes all right with no errors! :)
After you have run the tests, and built the project, your repo should be good to go for merging with master!
FAQs
Challonge API interface
We found that challonge-ts demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.