Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
npm install clara
$ npm install clara
$ clara set apiToken <api-token>
$ clara set username <username>
$ clara scenes:get <uuid>
Create a clara
instance with your api token and username:
// Visit https://clara.io/settings/api for your api token
var clara = require('clara')({apiToken: 'your-api-token', username: 'your-username'});
Every resource method returns a promise, or accepts an optional callback.
clara.scenes.list().then(function(scenes) {
}).catch(function(err) {
});
With callbacks:
clara.scenes.list({}, function(err, scenes) {
});
The parameters for each resource method are:
clara.scenes.update({sceneId: 'scene-id'}, './scene.json', function(err, result) {});
clara.scenes.create({}, function(err, newScene) {});
All commands are available from the command line runner as well.
$ clara --help
$ clara scenes:get --help
$ clara --apiToken <apiToken> --username <username> scenes:get <sceneId>
There are several ways to set up the configuration data, from highest to lowest priority:
clara --apiToken <apiToken> --username <username> scenes:get <sceneId>
Or with api:
var clara = require('clara')({apiToken: '...', username: '...'});
Any parameter can be passed through an environment variable, prefixed with clara_
:
clara_apiToken=api-token-here clara_username=username clara scenes:get <uuid>
A json file named .clara.json
can hold configuration data:
{
"apiToken": "api-token-here",
"username": "your-username"
}
If the configuration file .clara.json
exists in $HOME, it will be used.
You can use the clara command line to quickly set/get your configuration data. It will write
to $HOME/.clara.json
:
$ clara set apiToken your-api-token
$ clara set username your-username
$ clara scenes:get scene-uuid
Run the tests using npm:
$ npm install
$ npm tests
FAQs
Clara.io API wrapper
The npm package clara receives a total of 1 weekly downloads. As such, clara popularity was classified as not popular.
We found that clara demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.