Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
cimpress-customizr
Advanced tools
A thin client for accessing Cimpress Customizr service
Install the package:
npm install --save cimpress-customizr
Using the client
import {CustomizrClient} from 'cimpress-customizr'
const client = new CustomizrClient({
// The resource you'd like to get/put the settings from/to.
// You can either provide it here or directly in the get/putSettings methods
resource: undefined,
// The timeout to use for the network call. Default 3000ms
timeout: 3000,
// The address of Cimpress Customizr service
baseUrl: 'https://customizr.at.cimpress.io',
// How many try to retry the request in case of network error or 5xx response
retryAttempts: 2,
// How long to wait between retries in milliseconds
retryDelayInMs: 1000
});
client.getSettings(accessToken, resource).then(data => ...)
client.putSettings(accessToken, newData, resource).then(data => ...)
You can also use directly any of the following convenience functions:
import {
getMcpSettings,
setMcpSettings,
setPreferredMcpSettings,
getPreferredMcpLanguages,
setPreferredMcpLanguage,
getPreferredMcpTimezone,
setPreferredMcpTimezone
getMcpRegionalSettings,
setMcpRegionalSettings
} from 'cimpress-customizr'
setPreferredMcpSettings(accessToken, 'eng', 'en-US', 'Europe/Amsterdam').then(() => {})
getPreferredMcpLanguages(accessToken).then( languageArray => {
/*
languageArray = [language, ... ]
language = {
lang: 'en'
iso639_1: 'en',
iso639_2: 'eng',
iso639_3: 'eng'
}
*/
} )
setPreferredMcpLanguage(accessToken, newLanguage).then( ... )
Clone the repository
git clone https://github.com/Cimpress/cimpress-customizr
Run the following command to download the language translations files.
npm run build
Make sure your code passes the linting rules
npm run code-check
Make sure to update package.json with the new version of the package (please follow semantic versioning. After, please also update CHANGELOG.md file with short info for the changes in this new version.
Don't forget to enjoy!
[1.2.0] - 2021.05.19
FAQs
A thin client for Cimpress Customizr service
The npm package cimpress-customizr receives a total of 502 weekly downloads. As such, cimpress-customizr popularity was classified as not popular.
We found that cimpress-customizr demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.