Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
danbooru api wrapper
This api wrapper allows you to access Danbooru's API with functions and promises.
It works in Node.js and bundled for browsers where fetch is available.
const Danbooru = require('danbooru')
// Perform a search for popular image posts
const booru = new Danbooru()
booru.posts({ tags: 'rating:safe order:rank' }).then(posts => {
// Select a random post from posts array
const index = Math.floor(Math.random() * posts.length)
const post = posts[index]
// Get post's url and create a filename for it
const url = booru.url(post.file_url)
const name = `${post.md5}.${post.file_ext}`
// Download post image using node's https and fs libraries
require('https').get(url, response => {
response.pipe(require('fs').createWriteStream(name))
})
})
Jump to section: Using this module • Upgrading from previous versions
Once I've fleshed out this module a bit more, I plan to create more complete documentation for it. For now, here are some things you can do.
This module exports a Danbooru
class. Calling its constructor with no argument allows you to make unauthenticated requests to https://danbooru.donmai.us/.
const booru = new Danbooru()
If you would like to make authenticated requests, you can pass an authentication string in the format login:api_key
.
const login = 'login'
const key = 'api_key'
const booru = new Danbooru(login + ':' + key)
If you have an alternate Danbooru address you would like to connect to, you also specify that in this string.
const booru = new Danbooru('http://safebooru.donmai.us/')
const login = 'login'
const key = 'api_key'
const authenticatedBooru = new Danbooru(
`https://${login}:${key}@sonohara.donmai.us`
)
Posts represent images on Danbooru. You can query them like this:
const posts = await booru.posts({ limit: 100 })
Your parameters are passed directly to Danbooru's API:
limit
- The number of posts you'd like to retrieve on one page.page
- The page number you'd like to retrieve. Bigger numbers have older posts.tags
- Your Danbooru search tags. You can use two tags unauthenticated, as well as rating:safe
as a third tag for free.md5
- An image md5 to search for.random
- A boolean that randomizes your results.raw
- Disables tag parsing, treating tags
as a single literal tag.You'll get an array of objects that looks like this: https://danbooru.donmai.us/posts.json
You can also look up a single post using the same function:
const post = await booru.posts(2560676)
You'll get an object: https://danbooru.donmai.us/posts/2560676.json
Once you have a post, you'll likely want to extract its image. The most useful object properties for this purpose are:
file_url
: The post image. For small images, this is the same as large_file_url
.large_file_url
: The image you see by default on Danbooru, which may be scaled down.preview_file_url
: The tiny thumbnail used to represent this image.You can pass one of these values to booru.url()
to generate a URL
object, which you can turn into an absolute url by accessing url.href
or just typecasting it.
const post = await booru.posts(2560676)
const url = booru.url(post.file_url)
// Node.js
const request = http.get(url.href)
// Browsers
const response = await fetch(url)
Previous versions of this library have had functions to manipulate favorites for an authenticated user, so you can still do that with this version.
// Add a favorite
booru.favorites_create(2560676)
// Remove a favorite
booru.favorites_destroy(2560676)
Please note that due to Danbooru's security settings, this function may fail in browsers.
If you would like to do something I haven't added to this module yet, you can use these methods:
booru.get('/posts', queryStringParams)
booru.post('/favorites', bodyParams)
booru.put('/posts/2560676', bodyParams)
booru.delete('/favorites/2560676', bodyParams)
They all take two arguments. The first is a path, and the second is your parameters. They'll be sent as JSON for POST
, PUT
, and DELETE
requests, and as part of a query string for GET
requests.
Your paths' leading slashes are optional, but don't add extensions or query strings. These functions will automatically add .json
and any specified query string properties to the end.
Due to Danbooru's security settings, custom GET
requests should work in browsers, but other methods may fail.
This module was completely rewritten for each major release before this one.
Version 1 used callbacks, so upgrading involves completely rewriting your code.
Version 2 used promises like the current version does, so it should be possible to upgrade your code by swapping out some function calls, though you will need to rewrite code involving the old Post
type.
This module's class constructor now always takes a string.
The Safebooru subclass has been removed. You can still specify https://safebooru.donmai.us
manually.
// Version 2
const booru = new Danbooru('login', 'api_key')
// Version 3
const booru = new Danbooru('login:api_key')
// Version 2
const booru = new Danbooru({
login: 'login',
api_key: 'api_key',
base: 'https://safebooru.donmai.us'
})
// Version 2 and 3
const booru = new Danbooru('https://login:api_key@safebooru.donmai.us')
Searching for posts now always takes a parameter object.
// Version 2
const posts = await booru.posts('rating:safe')
// Version 2 and 3
const posts = await booru.posts({ tags: 'rating:safe' })
Getting individual posts is now performed via the main .posts()
function
// Version 2
const post = await booru.posts.get(2560676)
// Version 3
const post = await booru.posts(2560676)
There is no longer a posts object. These functions all return normal JavaScript objects that you can interact with normally.
Please refer to Getting an image above for details on how to download images. Many of the properties on the old .file
object can still be accessed as part of the post data object.
// Version 2
post.raw
// Version 3
post
// Version 2
post.tags
// Version 3
post.tag_string.split(' ')
// Version 2
String(post.rating)
// Version 3
post.rating
Functions that work with favorites have been renamed.
// Version 2 or 3
const favorites = await booru.favorites()
// Version 2
booru.favorites.add(2560676)
booru.favorites.add(post)
// Version 3
booru.favorites_create(2560676)
booru.favorites_create(post.id)
// Version 2
booru.favorites.delete(2560676)
booru.favorites.delete(post)
// Version 3
booru.favorites_destroy(2560676)
booru.favorites_destroy(post.id)
If you prefer older versions of this module, you can still install them with one of these commands, and find documentation for them on GitHub.
npm install danbooru@2
npm install danbooru@1
FAQs
danbooru api wrapper
The npm package danbooru receives a total of 21 weekly downloads. As such, danbooru popularity was classified as not popular.
We found that danbooru demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.