Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
JS SDK for Laurel & Wolf API
All requests and responses assume that the api strictly adheres to the JSON API spec.
npm install lw-sdk --save
import sdk from 'lw-sdk';
// Set data used for all requests
let api = sdk({
origin: 'https://api.somewhere.com',
headers: {
'michael': 'scarn'
}
});
try {
let res = await api()
.getProjects()
.include('schrute', 'schrute.farms')
.fields({
schrute: ['beets']
});
// Do something with res.body;
}
catch (err) {
// Do somethign with err.body;
}
4 verbs are used to describe how you interact with a resource
get
create
update
delete
For example, for the resource projects, the following methods are available:
getProjects
- list of projectsgetProject(:id)
- single projectcreateProject
updateProjects
deleteProject
Each method associated with a resource returns a promise. Any response with a status of less than 400
is considered a success and will resolve the promise. Any response with a status that is greater than or equal to 400 will reject the promise.
Both resolved and rejected responses return the status, body, headers, etc.
let api = sdk();
api()
.getProjects()
.then(() => {/* status is less than 400 */})
.catch(() => {/* status is greater than or equal to 400 */})
Default values make it easier to ensure that all requests are uniform and valid. Since the sdk uses the fetch api to make all requests, any options available to the fetch method are available when defining defaults.
There are 2 ways to set default values.
For all requests
let api = sdk({
headers: {
some: 'default'
}
});
For a specific request
let api = sdk();
api({
headers: {
some: 'custom header'
}
})
.getProjects();
All get
requests have the following chainable helper-methods available for building the JSON API request:
include
fields
sort
All create
and update
requests have the following chainable helper-methods available for build the JSON API requests:
relatedTo
projects
All tests get run in PhantomJS locally
Clone and install deps
git clone git@github.com:laurelandwolf/sdk.git sdk && cd sdk
npm install
While writing new tests it is recommended that you start the test server for faster test runs
npm test
Once the test server is started, open the browser to the specified url to watch the tests run. a file watcher watches your src and test files and re-runs the tests on file save.
For one-off test runs without starting the test server or for running tests on a ci box, use
npm run test-ci
FAQs
SDK for Laurel & Wolf API
The npm package lw-sdk receives a total of 10 weekly downloads. As such, lw-sdk popularity was classified as not popular.
We found that lw-sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.