
Product
Introducing Tier 1 Reachability: Precision CVE Triage for Enterprise Teams
Socket’s new Tier 1 Reachability filters out up to 80% of irrelevant CVEs, so security teams can focus on the vulnerabilities that matter.
hmpo-model
Advanced tools
The deprecated request
library has been replaced with got
. The API is very similar, and some args are translated, like auth, and proxy.
The new got
library doesn't automatically use the proxy environment variables so you would need to use something like global-agent
in your
app if you need to specify proxies by environment arguments.
The request
method no longer takes a body. This should be inserted as json
, body
, or form
into the requestConfig
method.
constructor(attributes?, options?)
options
provided, this will default to an empty object {}
.attributes
is first assigned an empty object without inheriting properties from Object.prototype
. e.g. this.attributes = Object.create(null);
.attributes
are provided then the attributes
object is set, with change
event notifications suppressed.get(key)
set(key, value, options?)
or set({ key: value }, options?)
change
event notifications if options.silent
is set. e.g. set(key, value, {silent: true})
.unset(fields, options?)
fields
can be passed as a string or an array. If fields
is of type 'string'
it will be wrapped in an array with this string as its single element.change
event notifications if options.silent
is set. E.g. unset(fields, {silent: true})
.reset(options?)
change
event notifications if options.silent
is set. E.g. reset({silent: true})
.increment(propertyName, amount?)
toJSON(bare?)
bare
can be set to true
or false
. Defaults to false
.bare
is set to true
, the JSON object will have a null
prototype and will not inherit object methods from Object.prototype
. Helpful info on this can be found on MDN Web Docs.The Remote Model is a sub-class of the previously highlighted Local Model, and as such inherits its constructor and property accessors.
Normally this would be used as an abstract class and extended with your own implementation.
Implementations would normally define at least a url():url
method to define the target of API calls.
Example implimentation:
class MyModel extends HmpoModel {
url() {
return super.url('https://my.example.com/url')
}
auth() {
return super.auth('username:password');
}
requestConfig(config) {
config.proxy = 'http://proxy.example.com:3128'
return super.requestConfig(config);
}
// add data to JSON post body
prepare(callback) {
super.prepare((err, data) => {
if (err) return callback(err);
data.foo = 'bar';
callback(null, data);
});
}
// transform returned data
parse(data) {
data.additionalItem = true;
return super.parse(data);
}
}
const model = new MyModel();
model.set('boo', 'baz');
model.save((err, data, responseTime) => {
if (err) return console.error(err);
console.log(data);
});
There are three methods for API interaction corresponding to GET, POST, and DELETE http methods:
fetch(args?, callback)
fetch
performs a GET
request on the url
const model = new Model();
model.fetch((err, data, responseTime) => {
console.log(data);
});
Request args for the got
library, can be set by overriding the requestConfig({}):{}
method.
The url
can be configured either by setting a default in the model options or requestConfig()
data, or by overriding the url(default, args):url
method.
proxy
, timeout
, and basic auth
can be set in the same way, using model options, setting in requestConfig()
, or by overriding a method.
Specifying a proxy
will set up a proxy tunneling agent
for the request.
Specifying a numeric timeout
will set the same timeout for all got
timeout values.
Basic auth
can be a colon separated string, or a {username, password}
or {user, pass}
object.
statusCode < 400
the JSON response will be set to the model.
This behaviour can be changed by overriding the parse(data):data
method.statusCode >= 400
the data will be passed to the parseError(statusCode, data):error
method, and the fetch
callback will be called with the returned error.parseResponse(statusCode, data, cb)
method can be overridden.handleResponse(response, cb)
method can be overridden.save(args?, callback)
save
performs a POST
request on the url
const model = new Model();
model.set({
property: 'properties are sent as JSON request body by default'
});
model.save((err, data, responseTime) => {
console.log(data);
});
model.toJSON()
. This behaviour can be changed by overriding the prepare(callback(err, data))
method.fetch
request above.delete(args?, callback)
delete
performs a DELETE
request on the url
const model = new Model();
model.delete((err, data, responseTime) => {
console.log(data);
});
API requests will emit events as part of their lifecycle.
sync
is emitted when an API request is sent
model.on('sync', function (settings) { });
success
is emitted when an API request successfully completes
model.on('success', function (data, settings, statusCode, responseTime) { });
fail
is emitted when an API request fails
model.on('fail', function (err, data, settings, statusCode, responseTime) { });
API requests will fire hooks specified in model options as part of their lifecycle.
new Model(null, options);
sync
hook is fired when an API request is sent
options.hooks.sync({ settings });
success
hook is fired when an API request successfully completes
options.hooks.success({ data, settings, statusCode, responseTime });
fail
hook is fired when an API request fails
options.hooks.fail({ err, data, settings, statusCode, responseTime });
hmpo-form-wizard example : Submit Model hmpo-app example : Submission Model
FAQs
Simple model for interacting with http/rest apis.
The npm package hmpo-model receives a total of 1,007 weekly downloads. As such, hmpo-model popularity was classified as popular.
We found that hmpo-model demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket’s new Tier 1 Reachability filters out up to 80% of irrelevant CVEs, so security teams can focus on the vulnerabilities that matter.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.