Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
humanloop
Advanced tools
[![fern shield](https://img.shields.io/badge/%F0%9F%8C%BF-Built%20with%20Fern-brightgreen)](https://buildwithfern.com?utm_source=github&utm_medium=github&utm_campaign=readme&utm_source=https%3A%2F%2Fgithub.com%2Fhumanloop%2Fhumanloop-node) [![npm shield](
The Humanloop TypeScript library provides convenient access to the Humanloop API from TypeScript.
npm i -s humanloop
A full reference for this library is available here.
Instantiate and use the client with the following:
import { HumanloopClient } from "humanloop";
const client = new HumanloopClient({ apiKey: "YOUR_API_KEY" });
await client.prompts.log({
path: "persona",
prompt: {
model: "gpt-4",
template: [
{
role: "system",
content: "You are {{person}}. Answer questions as this person. Do not break character.",
},
],
},
messages: [
{
role: "user",
content: "What really happened at Roswell?",
},
],
inputs: {
person: "Trump",
},
createdAt: "2024-07-19T00:29:35.178992",
providerLatency: 6.5931549072265625,
outputMessage: {
content:
"Well, you know, there is so much secrecy involved in government, folks, it's unbelievable. They don't want to tell you everything. They don't tell me everything! But about Roswell, it's a very popular question. I know, I just know, that something very, very peculiar happened there. Was it a weather balloon? Maybe. Was it something extraterrestrial? Could be. I'd love to go down and open up all the classified documents, believe me, I would. But they don't let that happen. The Deep State, folks, the Deep State. They're unbelievable. They want to keep everything a secret. But whatever the truth is, I can tell you this: it's something big, very very big. Tremendous, in fact.",
role: "assistant",
},
promptTokens: 100,
outputTokens: 220,
promptCost: 0.00001,
outputCost: 0.0002,
finishReason: "stop",
});
The SDK exports all request and response types as TypeScript interfaces. Simply import them with the following namespace:
import { Humanloop } from "humanloop";
const request: Humanloop.PromptLogRequest = {
...
};
When the API returns a non-success status code (4xx or 5xx response), a subclass of the following error will be thrown.
import { HumanloopError } from "humanloop";
try {
await client.prompts.log(...);
} catch (err) {
if (err instanceof HumanloopError) {
console.log(err.statusCode);
console.log(err.message);
console.log(err.body);
}
}
The SDK is instrumented with automatic retries with exponential backoff. A request will be retried as long as the request is deemed retriable and the number of retry attempts has not grown larger than the configured retry limit (default: 2).
A request is deemed retriable when any of the following HTTP status codes is returned:
Use the maxRetries
request option to configure this behavior.
const response = await client.prompts.log(..., {
maxRetries: 0 // override maxRetries at the request level
});
The SDK defaults to a 60 second timeout. Use the timeoutInSeconds
option to configure this behavior.
const response = await client.prompts.log(..., {
timeoutInSeconds: 30 // override timeout to 30s
});
The SDK allows users to abort requests at any point by passing in an abort signal.
const controller = new AbortController();
const response = await client.prompts.log(..., {
abortSignal: controller.signal
});
controller.abort(); // aborts the request
The SDK defaults to node-fetch
but will use the global fetch client if present. The SDK works in the following
runtimes:
The SDK provides a way for your to customize the underlying HTTP client / Fetch function. If you're running in an unsupported environment, this provides a way for you to break glass and ensure the SDK works.
import { HumanloopClient } from "humanloop";
const client = new HumanloopClient({
...
fetcher: // provide your implementation here
});
While we value open-source contributions to this SDK, this library is generated programmatically. Additions made directly to this library would have to be moved over to our generation code, otherwise they would be overwritten upon the next generated release. Feel free to open a PR as a proof of concept, but know that we will not be able to merge it as-is. We suggest opening an issue first to discuss with us!
On the other hand, contributions to the README are always very welcome!
FAQs
[![fern shield](https://img.shields.io/badge/%F0%9F%8C%BF-Built%20with%20Fern-brightgreen)](https://buildwithfern.com?utm_source=github&utm_medium=github&utm_campaign=readme&utm_source=https%3A%2F%2Fgithub.com%2Fhumanloop%2Fhumanloop-node) [![npm shield](
We found that humanloop demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.