Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Feedr takes in a remote feed (regardless of format type) and converts it into JSON data
npm install --save feedr
// Prepare
var Feedr, feedr, feeds;
// Include the Feedr Class
Feedr = require('feedr').Feedr;
// Create our Feedr instance, we can pass optional configuration to it here if we wanted
feedr = new Feedr();
// Prepare our feeds that we want read
feeds = {
github: {
url: "https://github.com/bevry/feedr/commits/master.atom"
},
twitter: {
url: "https://api.twitter.com/1/statuses/user_timeline.json?screen_name=balupton&count=20&include_entities=true&include_rts=true"
}
};
// Read our feeds and return the result
feedr.readFeeds(feeds, function(err,result){
console.log(err,result.github,result.twitter);
});
log: null
our log function to uselogError: null
our error log function to usetmpPath: null
the tempory path to cache our feedr results to (will autodetect if null
)cache: true
whether or not we should cache the resultscacheTime: 1000*60*5
how long should the cache stay active in millisecondstimeout: 10*1000
how long should we wait before aborting the request in millisecondsxmljsOptions: null
what options should we pass to xml2js (can be a string which will reference to xml2js.defaults
)You can discover the history inside the History.md
file
Licensed under the MIT License
Copyright © 2012+ Bevry Pty Ltd
v2.4.4 2013 April 22
FAQs
Use feedr to fetch the data from a remote url, respect its caching, and parse its data. Despite its name, it's not just for feed data but also for all data that you can feed into it (including binary data).
The npm package feedr receives a total of 0 weekly downloads. As such, feedr popularity was classified as not popular.
We found that feedr demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.