Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
feathers-blob
Advanced tools
Feathers
abstract blob store
service
npm install feathers-blob --save
Also install a abstract-blob-store
compatible module.
import BlobService from 'feathers-blob'
blobService = BlobService(options)
options.Model
is an instantiated interface that implements the abstract-blob-store
APIoptions.id
is a string 'key' for the blob identifier.blobService.create(body, params)
where input body
is an object with key uri
pointing to data URI of the blob.
Optionally, you can specify in the body
the blob id
which can be the file
path where you want to store the file, otherwise it would default to
${hash(content)}.${extension(contentType)}
.
Tip: You can use feathers hooks to customize the id
. You might not want the
client-side to write whereever they want.
returns output 'data' of the form:
{
[this.id]: `${hash(content)}.${extension(contentType)}`,
uri: body.uri,
size: length(content)
}
blobService.get(id, params)
returns output data
of the same form as create
.
blobService.remove(id, params)
import { getBase64DataURI } from 'dauria';
import AWS from 'aws-sdk';
import S3BlobStore from 's3-blob-store';
import BlobService from 'feathers-blob';
const s3 = new AWS.S3({
endpoint: 'https://{service}.{region}.{provider}.com',
accessKeyId: process.env.AWS_ACCESS_KEY_ID,
secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY,
});
const blobStore = S3BlobStore({
client: s3,
bucket: 'feathers-blob'
});
const blobService = BlobService({
Model: blobStore
});
const blob = {
uri: getBase64DataURI(new Buffer('hello world'), 'text/plain')
}
blobService.create(blob).then(function (result) {
console.log('Stored blob with id', result.id);
}).catch(err => {
console.error(err);
});
Should you need to change your bucket's options, such as permissions, pass a params.s3
object using a before hook.
app.service('upload').before({
create(hook) {
hook.params.s3 = { ACL: 'public-read' }; // makes uploaded files public
}
});
For a more complete example, see examples/app which can be run with npm run example
.
Copyright (c) 2016
Licensed under the MIT license.
v1.4.0 (2018-02-16)
Closed issues:
Merged pull requests:
FAQs
Feathers blob service
The npm package feathers-blob receives a total of 3,287 weekly downloads. As such, feathers-blob popularity was classified as popular.
We found that feathers-blob demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.