Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
node-fb-graph
Advanced tools
Node.js module for interacting with the Facebook Graph API.
This module interfaces with the Facebook Graph API using a specific client access token that must be provided by the consumer of this library.
This module requires a page id and a page access token that corresponds to that page id. A page access token will expire frequently. To create an extension for the access token, use Facebook's Access Token Debugger to debug the token. On the Access Token tab, click the Extend Access Token button on the bottom left. If the button is not present you are most likely debugging a user access token. Copy and paste your page access token into the debugger and click Debug. The Extend Access Token button should now appear.
npm install node-fb-graph -S
npm test
Code quality will be checked using eslint with the --fix
argument so repair easily-fixed rule-breaking code.
npm run lint
Code coverage is maintained by using the nyc command-line-client for Istanbul with Coveralls reporting.
Continuous integration provided by Travis CI.
In lieu of a formal style guide, take care to maintain the existing coding style. Add unit tests for any new or changed functionality. Lint and test your code.
Updates and discussions about this module can be found @symBrendan on Twitter.
For transparency into a common release cycle to strive toward maintaining backward compatibility, this project is maintained under the Semantic Versioning guidelines.
The following commands will create a new version of the module, automatically create a new tag with the same value as the version, push the tags to the remote, and, finally, push the code to the remote.
git add .
git commit -m "your commit message"
The npm publish
command will create a patch in package.json, add a new tag, push the tag, and publish the changes to npmjs.
npm publish
Brendan Conrad
This project is licensed under the terms of the MIT license.
FAQs
Node.js module for interacting with the Facebook Graph API
We found that node-fb-graph demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.