
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
mercurius-apollo-registry
Advanced tools
A Mercurius plugin for schema reporting to Apollo Studio.
npm install mercurius-apollo-registry
Please note that this plugin requires Mercurius as a dependency.
This plugin can be used to report a given GraphQL schema to the Apollo Studio Registry.
In order to use this plugin, you should already have an account with Apollo Studio as well as at least one target graph already defined. Each graph has a unique API key associated with it that will be required by this plugin at start up.
You can find more information about Apollo Studio here.
const mercuriusApolloRegistry = require('mercurius-apollo-registry')
fastify.register(mercuriusApolloRegistry, {
schema,
apiKey
})
schema
string
(required) A stringified version of the GraphQL schema used by Mercurius.apiKey
string
(required) API key for the specific graph you wish to reference in Apollo Studio.graphVariant
string
(optional) The GraphQL variant to use in Apollo Studio. Defaults to current
.registryUrl
string
(optional) The registry API endpoint to use. Defaults to https://schema-reporting.api.apollographql.com/api/graphql
.A complete reference for the registry reporting protocol can be found in the Apollo GraphQL Documentation.
This plugin aims to allow integration and operability between Apollo Studio and Mercurius.
See CONTRIBUTING.md
Copyright NearForm Ltd 2021. Licensed under the Apache-2.0 license.
FAQs
A schema reporting plugin for Mercurius
We found that mercurius-apollo-registry demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.