Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
jsonapi-renderer
Advanced tools
This module makes it easy to render a model or an array of models in a format that matches the jsonapi.org specification.
The module expects each model to have a jsonapiType
property on the model.
Each model type must have their definition registered by passing it to the constructor of the renderer.
{
'type': The name of the type of model. The name should be the same as the resource in the api,
'id': The property from which the id of the model can be retrieved. Defaults to `id`,
'link': A function to generate a link to this resource. The function will be called with the model as the 'this'.
'attributes': {
'{attribute name}': {
'property': The property where the value from the given attribute can be retrieved. This can also reference a function name, which will then be called. Defaults to the name of the attribute.
'get': A function that will called to retrieve the value for the attribute. The function will be called with the model as the 'this'.
'format': A function that will be called to format the value. This can f.ex. be used to format a date in a certain way.
'valid': A function that can be used to indicate if the attribute is valid for this particular model. If it returns false, the attribute will be skipped. The function will be called with the model as the 'this' and the value as the only argument.
'renderByDefault': True if the attribute should be rendered to the output by default, false otherwise. Defaults to `true`.
},
... more attributes
},
'relationships': {
'{relationship name}': {
'property': The property where the value from the given attribute can be retrieved. This can also reference a function name, which will then be called. Defaults to the name of the attribute.
'get': A function that will called to retrieve the value for the attribute. The function will be called with the model as the 'this'.
'valid': A function that can be used to indicate if the attribute is valid for this particular model. If it returns false, the attribute will be skipped. The function will be called with the model as the 'this' and the value as the only argument.
'renderByDefault': True if the attribute should be rendered to the output by default, false otherwise. Defaults to `true`.
'includeByDefault': True if the relationship should be added to the `included` section by default, false otherwise. Defaults to `false`.
}
}
}
Short-hand expressions is possible for each attribute and relationship. If the value is a boolean
, it will be used as the value for renderByDefault
. If the value is a string
, it will be used as the value for property
. If null
or undefined
, default values will be used.
Values for attributes should only be primitives, and values for relationships should only be other models.
FAQs
Helper for generating jsonapi compliant output from models
The npm package jsonapi-renderer receives a total of 1 weekly downloads. As such, jsonapi-renderer popularity was classified as not popular.
We found that jsonapi-renderer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.