Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
gatsby-source-custom-api
Advanced tools
Source data from any API and transform it into Gatsby-nodes. Download your image files and use them with Gatsby Image.
Gatsby Source Custom API helps you sourcing data from any API and transform it into Gatsby nodes. Define keys you want to be transformed into image-nodes and use them with Gatsby Image.
Install the package with npm or yarn
npm install gatsby-source-custom-api
yarn add gatsby-source-custom-api
Add to plugins in your gatsby-config.js
module.exports = {
{
resolve: 'gatsby-source-custom-api',
options: {
url: {
development: 'http://your-local-api.dev',
production: 'https://remote-api-server.de/',
}
},
},
}
Name | Type | Description |
---|---|---|
url | object or string | Required. Url of your API as a string. If you have two different APIs for development and production, define an object with the keys production and development . |
rootKey | string | Optional. Name your API. |
imageKeys | array | Define the keys of image-objects you want to transform to image-nodes, that can be used with Gatsby Image. This objects need to have a key called url as image-source. Gatsby-Images are added under the sub-key local . Default: ['image'] . |
Gatsby Source Custom API
automatically downloads your image-files, so you can use them with Gatsby Image.
The default key for images is image. You can also define your own image keys with the option imageKeys
. Images have to be objects containing a key called url
, that holds the string to its source.
If your image object provides a key called modified
, this key gets cached and compared every time you build or develop. If it stays the same, the already downloaded version of the image-file is used.
This is an example of how you use the required nodes to automatically generate pages: Insert the following code into the file gatsby-node.js
. The sample key here is an array called posts
. All array-elements can be required in GraphQl via allPosts
. In this example the posts have a child-key called "url", which defines their path and serves as marker to find them in your matching React-component (pages/post.js
).
const path = require('path')
exports.createPages = async ({ graphql, actions }) => {
const { createPage } = actions
const result = await graphql(`
{
allPosts {
edges {
node {
url
}
}
}
}
`)
return Promise.all(
result.data.allPosts.edges.map(async ({ node }) => {
await createPage({
path: node.url,
component: path.resolve('./src/pages/post.js'),
context: {
// Data passed to context is available
// in page queries as GraphQL variables.
url: node.url,
},
})
})
)
}
In your pages/post.js
you can require the data like so:
import React from 'react'
import { graphql } from 'gatsby'
const Post = ({ data }) => {
return <h1>{data.posts.title}</h1>
}
export const query = graphql`
query($url: String) {
posts(url: { eq: $url }) {
url
title
image {
local {
childImageSharp {
fluid(maxWidth: 2000) {
...GatsbyImageSharpFluid_withWebp
}
}
}
alttext
}
}
}
`
export default Post
This source-plugin was originally developed to use the amazing Open-Source-CMS ProcessWire as a source for Gatsby. This simply can be achieved with this home
-template:
<?php namespace ProcessWire;
require_once ("buildPosts.php");
header('Content-Type: application/json');
if ($page->name === "home") {
$posts = $pages->find("template=post");
return json_encode([
"posts" => buildPosts($posts),
]);
}
This could be the required file buildPosts.php
:
<?php namespace ProcessWire;
function buildPosts($posts) {
$return = [];
foreach ($posts as $post) {
$return[] = [
"url" => $post->url,
"title" => $post->title,
"image" => [
"url" => $post->image->httpUrl,
"description" => $post->image->description,
],
];
}
return $return;
}
Additionally, I developed a ProcessWire-Module, to trigger Gatsby-builds from the backend. I’ve planned to publish this module open-source in the near future, but it needs some more work, to make it universally deployable.
Every contribution is very much appreciated. Feel free to file bugs, feature- and pull-requests.
If this plugin is helpful for you, star it on GitHub.
FAQs
Source data from any API and transform it into Gatsby-nodes. Download your image files and use them with Gatsby Image.
The npm package gatsby-source-custom-api receives a total of 2,478 weekly downloads. As such, gatsby-source-custom-api popularity was classified as popular.
We found that gatsby-source-custom-api demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.