Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
godjira-wrapper
Advanced tools
JIRA REST API wrapper for node
var Jira = require('./index'),
jira = new Jira({
user: '', //jira username
pass: '', //password
host: '', //your jira host/instance
project: {
key: '', //the project key
name: '' //the project name
}
});
// Get a project
jira.getProject(_projectkey_, function(e, res){});
//Get issues for a user
jira.getUserIssues(_jira username_, {startAt: 0}, function(e, res){});
//Get an issue
jira.getIssue(_issue_number_, function(e, res){ });
//Get rapidviews for the host
jira.getRapidViews(function(e, res){});
//Get the latest sprint for project specified in the options
jira.getLatestSprint(function(e, res){ });
//Get details of a particular rapidview
jira.getRapidView('121', function(e, res){});
Wrap http requests with auth and host
Wrap post requests
See: get
Use JQL to construct a search query and return the results
Return a formatted response containing projects for the specified host
Return the details for a project based on the project key
Return the issues belonging to a user
Get an issue object
Get a sprint by id
Get the latest sprint from a project. The JIRA API doesn't have a way of connecting the projects directly to sprints so the solution was to first get the rapidviews from a project by doing a string match on the jql query for the view. From the view's id we can get the sprint itself.
Get all rapidviews for the hosted jira
Get details for a particular rapidview
Get the rapid id from a project by matching name or key
Return the active sprints by checking sprintSupportEnabled
FAQs
JIRA REST API wrapper for node
We found that godjira-wrapper demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.