
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Ironwing is a lightweight front-end data library for model like data representations
In a few words, ironwingjs is a lightweight, isomorphic, framework-agnostic JavaScript library. ironginwjs is ment to be super easy to use and easy to integrate on any app. Out of the box it offers CRUD manipulation over a REST API interface.
$ npm install ironwing
Ironwing was ment to be simple. So let's say we have the /api/users
endpoint and we want to manipulate the data that's coming from that API.
// Tell ironwing to interact with the /api base path for all operations
ironwing.base = '/api';
// Fetch a collection and make a GET hit on /api/users
ironwing('users').then((users) => {
// do something with users collection
});
// Fetch a single resource
ironwing('users', 100).then((user) => {
// do something with the fetched user resource
});
// Update a resource
ironwing('users', 100).then((user) => {
// access the resource attributes via the .attr object
user.attr.name = 'Carl';
user.update();
});
// Delete a resource
ironwing('users', 100).then((user) => {
user.delete();
});
Here is a map of the endpoints ironwing will hit on every operation
Action | Method | URL | Returns |
---|---|---|---|
ironwing('users', 1) | GET | /users/:id | Model |
ironwing('users') | GET | /users | Collection |
user.update() | PUT | /users/:id | Model |
ironwing.create() | POST | /users | Model |
user.delete() | DELETE | /users/:id | NULL |
An adapter is an object which follows a predefined interface so that it can be integrated with ironwing. Out of the box, ironwingjs comes with a JSON adapter which is an intermediate object that communicates with the XMLHttpRequest
API. The developer doesn't interact directly with the adapter. The adapter is used “under the hood” by ironwing. The main purpose of adapters is to easily modify how ironwing interacts with the server. Anyone can write their own adapter and use it with ironwingjs. By default, ironwing loads the JSON adapter. You only have to specify the API's path so ironwing can communicate with your service properly.
Here's a simple example:
import ironwing from './ironwing';
ironwing.base = '/api';
By default, ironwing has a local (heap) storage. After ironwing fetches a new model, by default it stores it locally for later use. So for example if we were to fetch data from an endpoint called /users/100:
ironwing('users', 100).then((user) => {
console.log(user.attr.name);
});
We can later on retrieve that model from memory without any extra trips to the server, by simply calling
var userModel = ironwing.storage.find('users', 100);
Or, if we fetched a collection
ironwing('users',).then((users) => {
console.log(users.length);
});
we can later on get one or all users type model
var usersCollection = ironwing.storage.findAll('users');
For the moment, only the default storage can be used. In future releases we hope to implement a way to switch between storage implementations like an adapter for local storage so you can save the state of your models after refresh.
The constructor method ironwing() is basically a factory method which returns Model
instances. Each model exposes CRUD methods for manipulating your data. However, ironwing never modifies the raw JSON data directly. It exposes a proxy object as an intermediate. Each model object has a .attr
object which contains a camel cased transformation of the JSON response. Everything you edit on the attr proxy object, it will be later synced with the original raw response and sent to the back-end. This technique offers control over what gets edited and what doesn't. In future releases, with the help of the proxy object, some cool features can be added like validators on attributes.
A quick create and update example:
import ironwing from './ironwing';
var userData = {
first_name: 'Jon',
last_name: 'Doe';
};
ironwing.base = '/api';
ironwing.create('users', userData).then((userModel) => {
/**
* a POST request is sent to the server
* /api/users
*/
userModel.attr.firstName = 'Jon';
userModel.attr.lastName = 'Doe';
userModel.update().then(() => {
/**
* a PUT request is sent to the server
* /api/users/:id
*/
});
});
MIT
FAQs
Ironwing is a lightweight front-end data library for model like data representations
The npm package ironwing receives a total of 0 weekly downloads. As such, ironwing popularity was classified as not popular.
We found that ironwing demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.