
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
node-github.js
Advanced tools
npm install node-github.js --save
It depends on axios as a main dependency and moment to parse the date/time returned by the data.
npm install
const GithubClient = require("node-github.js");
const client = new GithubClient();
The methods return a Promise. You can resolve it using .then() to get the results.
client.getUser("Sync-Codes").then((data) => console.log(data)); // returns a user object with the data
{
username: 'Sync-Codes',
avatar: 'https://avatars.githubusercontent.com/u/37131433?v=4',
name: 'Bhavya Dang',
bio: 'Web Developer and Designer',
website: 'https://synxc.carrd.co/',
followers: 11,
following: 25,
createdAt: 'Mar 7th, 2018',
location: 'India',
total_public_repos: 45,
total_private_repos: 'None'
}
Returns a repo object with the Repositiory data of the username passed as para.
Returns a orgs object with the Organization data of the username passed as para.
Returns an object containing the best match results of the user. Filtered by the query parameter passed.
Returns an object containing the best match results of the topic. Filtered by the query. The topic is always a featured topic.
You can contact me on my Discord (Sync#9069).
Found an issue? Open up an issue here!
© Sync-Codes, 2020
Released under MIT License.
FAQs
A simple node.js wrapper for the Github API V3
We found that node-github.js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.