Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
flex-plugins-api-client
Advanced tools
This package provides a NodeJS HTTP client for using the Public API endpoints.
Install this package using:
# Using npm
npm i -S flex-plugins-api-client
# Using yarn
yarn add flex-plugins-api-client
Instantiate a PluginServiceHttpClient
client by providing username/password (AccountSid/AuthToken, API Key/Secret, or JWE token). Then instantiate each client (corresponding to different resources) by passing this HTTP client to it:
import {
PluginServiceHttpClient,
PluginsClient,
PluginVersionsClient
} from 'flex-plugins-api-client';
// Instantiate the HTTP client
const httpClient = new PluginServiceHttpClient(process.env.USERNAME, process.env.PASSWORD);
// Now instantiate each endpoint client you want to use
const pluginsClient = new PluginsClient(httpClient);
const pluginsVersionClient = new PluginVersionsClient(httpClient);
The available clients are listed below. All endpoints return a promise.
Note: If you are using the JWE token for authentication, then all identifiers (such as pluginId
, versionId
, etc) must be the sid of the resource only.
This is the HTTP client for plugins endpoints. Available endpoints are:
This endpoint lists all plugins.
This endpoint fetches the provided plugin. The pluginId
can either be the unique name or the plugin sid.
This endpoint creates a new plugin.
This endpoint updates a plugin. The pluginId
can either be the unique name or the plugin sid.
This endpoint tries to find the plugin by uniqueName. If it is found, then it updates the plugin; otherwise, it creates a new plugin.
This is the HTTP client for plugin versions endpoints. Available endpoints are:
This endpoint lists all plugin versions of the given plugin. The pluginId
can either be the unique name or the plugin sid.
This endpoint returns the latest plugin version (by the date created) of the given plugin. The pluginId
can either be the unique name or the plugin sid.
This endpoint fetches the provided plugin version. The pluginId
can either be the unique name or the plugin sid and the versionId
can either be the version or the plugin version sid.
This endpoint creates a new plugin version. The pluginId
can either be the unique name or the plugin sid.
This is the HTTP client for configurations endpoints. Available endpoints are:
This endpoint lists all configurations.
This endpoint fetches the provided configuration. The configId
can either be version of the configuration sid.
This endpoint creates a new configuration.
This is the HTTP client for configured plugins endpoints. Available endpoints are:
This endpoint lists all configured plugins. The configId
can either be version of the configuration sid.
This endpoint fetches the provided configured plugins. The configId
can either be version of the configuration sid and the pluginId
can either be the unique name or the plugin sid.
This is the HTTP client for releases endpoints. Available endpoints are:
This endpoint lists all releases.
This endpoint returns the currently active release.
This endpoint fetches the provided release. The releaseId
is the release sid.
This endpoint creates a new release.
The list
endpoints can taken an optional pagination
parameter. The interface for this parameter is and it follows the regular Twilio pagination format:
interface Pagination {
pageSize?: number;
page?: number;
pageToken?: string;
}
The list endpoints return data in the format of:
interface PaginationMeta {
meta: {
page: number;
page_size: number;
first_page_url: string;
previous_page_url: string;
url: string;
next_page_url?: string;
key: string;
next_token?: string;
previous_token?: string;
};
}
The next_token
and previous_token
will be parsed from the next_page_url
and previous_page_url
if available and can be used to be passed as Pagination
parameter to the next list
call.
FAQs
Flex Plugins API Client
We found that flex-plugins-api-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.