
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
github-getter
Advanced tools
webhooks coming soon (so you gh hosted content can tell you site when to update!)
A quick and easy way to get files from github
Hosting content on github is awesome! github-getter makes accessing those files easy (so you don't waste your precious time reading api docs!)
Break down interaction with github into users, repos and files.
import { GHFile, GHRepo, GHUser } from 'github-getter'
GHFile
Input a filepath and repo name to get and GHFile
object OR
GHRepo
: Input a repo name to get a GHFile
object for everything in the repo OR
GHUser
: Input a user/org name and get a GHRepo
object for each repository belonging to that user/org
https://github.com/settings/tokens
config.env
in your projects rootghtoken=****************
to the file, adding you token.npm i github-getter --save
import { gHUser, gHRepo } from 'github-getter.js';
gHUser('dwyl', true)({
getRepos: (err, repos) => {
repos.adoro({ // my favorate dwyl repo ;)
getReadme: (err, readme) => readme({
getData: console.log
// logs the file from https://github.com/dwyl/adoro/blob/master/README.md to the console
})
});
}
});
gHRepo('des-des/aibox')({
getFiles: (err, files) => {
files['.babelrc']({
getData: console.log
// logs the file from https://github.com/des-des/aibox/blob/master/.babelrc to the console
});
},
getReadme: (err, readme) => readme({
getData: console.log
// logs the file from https://github.com/des-des/aibox/blob/master/README.md to the console
})
});
see src/index.es6 for the example!
FAQs
Quick and easy github file retrieval
We found that github-getter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.