Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
inquiry-traverser
Advanced tools
A Promise based wrapper for prompting branched questions with Inquirer.js
A Promise based wrapper for prompting branched questions with Inquirer.js and alternatives using the same API, such as inquirer-shortcuts
$ npm install inquiry-traverser
var inquirer = require('inquirer');
var traverser = require('inquiry-traverser');
var traverse = traverser(inquirer);
traverse({ /* Put your branched questions object here */ })
.then(function onResolve (value) {
// Handle a successfull resolution ...
})
.catch(function onReject (reason) {
// Handle a rejection ...
});
Check the examples
folder, run the scripts, e.g.
$ node examples/basic-usage.js
The basic-usage
example shows the use of prompts of type confirm
, the module's redirection feature and provokes a rejection on the second prompt due to a missing resolution of one of its results.
The advanced-usage
example uses prompts of type list
, rawlist
and expand
, as well as the redirection feature.
Contrary to the default behaviour of Inquirer.js, which resolves the returned promise with user's responses to all prompted questions, the Promise returned by inquiry-traverser
receives only a particular value (see the basic usage example).
Currently inquiry-traverser
lacks a proper documentation and tests. At the moment, even only prompts of type confirm
are tested.
This will change and be more complete soon, hopefully. Until then, feel free to file bug reports or make suggestions. Pull requests welcome :)
FAQs
A Promise based wrapper for prompting branched questions with Inquirer.js
The npm package inquiry-traverser receives a total of 2 weekly downloads. As such, inquiry-traverser popularity was classified as not popular.
We found that inquiry-traverser demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.