Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
json-api-shop
Advanced tools
Javascript based tools for building applications based on json:api specification and conventions
Javascript based tools for building applications based on JSON:API specification and conventions.
Request validation. JSON:API specification defines how resources are queried and manipulated. If a client request is malformed (invalid relationship payload, missing resource type or id, invalid query parameters...) bundled tools will ensure that it never reaches your application logic and will report bad requests back to client.
JSON:API resource representation with included resources. Building included resources payload can be daunting task involving recursion, sub queries, memoization and other techniques. Here this work is done automatically with no configuration or development effort needed.
Sparse fieldsets and relationship includes. No config needed here too. Clients can request smaller resource payloads using sparse fieldsets and relationship includes leaving your server and application logic with less sub-queries and work in general. This type of response / logic trimming is also done automatically.
HTTP server to present and manipulate your resources via api. Express node.js server comes bundled and preconfigured with all route and error handlers.
Browser server to prototype apps or mock api endpoints in test suits. Included browser based server intercepts XMLHttpRequest and Fetch requests and pulls a trick on your frontend api handlers. Your mocked dataset lives in browser memory and can even be persisted in browser storage (local storage, session storage...). Serverlesss. Kind of.
FAQs
Javascript based tools for building applications based on json:api specification and conventions
The npm package json-api-shop receives a total of 83 weekly downloads. As such, json-api-shop popularity was classified as not popular.
We found that json-api-shop demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.