Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
A Node toolkit for the Drip API. Based on the official Ruby client library:
Requirements:
yarn
yarn add drip-api
npm
npm i drip-api --save
For private integrations, you may use your personal API key (found
here) via the apiKey
option:
client = require('drip-api')({
apiKey: "YOUR_API_KEY",
accountId: "YOUR_ACCOUNT_ID"
})
For public integrations, pass in the user's OAuth token via the accessToken
option:
client = require('drip-api')({
accessToken: "YOUR_ACCESS_TOKEN", // obtained from oauth
accountId: "YOUR_ACCOUNT_ID" // obtained from oauth
})
Your account ID can be found here. Most API actions require an account ID, with the exception of methods like the "list accounts" endpoint.
Since the Drip client is a flat API client, most API actions are available as methods on the client object. The following methods are currently available:
Action | Method |
---|---|
List accounts | client.accounts(callback) |
Track an event | client.trackEvent(email, action, properties, options, callback) |
// promises
client.accounts().then(function (response) {
// response
}).catch(function (error) {
// error
})
// callbacks
client.accounts(function (error, response) {
// if (error) // handle error
// response
})
Note: We do not have complete API coverage yet. If we are missing an API method that you need to use in your application, please file an issue and/or open a pull request. See the official REST API docs for a complete API reference.
This library follows the debug logger standard for optional logger output. To see logger output from this library set DEBUG env variable to 'drip'. For example to see log output in tests:
DEBUG=drip npm test
git checkout -b my-new-feature
)git commit -am 'Add some feature'
)git push origin my-new-feature
)Notes about contributing
yarn add
) for adding new packages so that yarn.lock gets updatedFAQs
Node client for Drip Api https://www.drip.co/
The npm package drip-api receives a total of 0 weekly downloads. As such, drip-api popularity was classified as not popular.
We found that drip-api demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.