Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Attractive, anonymous, globally-aware like buttons for anything. Simple embed an iframe in your website and it will use the public API. Or, you can self-host the API in order to add a custom like button to your nodejs project. You can use Instalike buttons to hold informal polls, to ask the internet for approval, and even to impress your friends.
There are 2 ways you can use Instalike: with the public API, or as a self-hosted node package.
Place the <iframe>
into your HTML, and specify a THING
to keep track of. (Thing names are case-sensitive and can contain any Unicode characters.) That's it! The http://instalike.click website will automatically use the public API to keep track of the like count for your "thing." Optionally, you can specify align=right
to make the button right-aligned (default is left-aligned).
<iframe src="//instalike.click/button/?thing=THING&align=left" frameborder="0" scrolling="0" width="140px" height="20px">
</iframe>
API hosting provided by Cimpress. The API supports GET/POST/PATCH http://instalike.click/api/THING.
Install the npm module if you want to host the API yourself. This is perfect for on-premesis enterprise installations.
$ sudo npm install -g gulp
$ npm install instalike
$ redis-server & # or start it as a service
$ npm start
# Note: stop redis safely using redis-cli
$ redis-cli
127.0.0.1:6379> shutdown
2002:M 20 Jul 16:50:13.137 # User requested shutdown...
2002:M 20 Jul 16:50:13.137 * Saving the final RDB snapshot before exiting.
2002:M 20 Jul 16:50:13.138 * DB saved on disk
2002:M 20 Jul 16:50:13.138 # Redis is now ready to exit, bye bye...
not connected> exit
Job 1, 'redis-server &' has ended
Pull requests welcome. The tech stack is very simple:
The ./public
directory contains all the source files:
Here are examples of calls to the JSON API:
GET /api/{thingName} HTTP/1.1
Host: instalike.click
Accept: application/json
200 OK
{
"thing": "{thingName}",
"count": 42
}
POST /api/{thingName} HTTP/1.1
Host: instalike.click
Accept: application/json
200 OK
{
"thing": "{thingName}",
"count": 43
}
PATCH /api/{thingName} HTTP/1.1
Host: instalike.click
Accept: application/json
200 OK
{
"thing": "{thingName}",
"count": 42
}
FAQs
Embeddable like button for anything.
The npm package instalike receives a total of 1 weekly downloads. As such, instalike popularity was classified as not popular.
We found that instalike demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.