
Security News
Node.js Drops Bug Bounty Rewards After Funding Dries Up
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.
node-github.js
Advanced tools
npm install node-github.js --save
It depends on axios as a main dependency and moment to parse the date/time returned by the data.
npm install
const GithubClient = require("node-github.js");
const client = new GithubClient();
The methods return a Promise. You can resolve it using .then() to get the results.
client.getUser("Sync-Codes").then((data) => console.log(data)); // returns a user object with the data
{
username: 'Sync-Codes',
avatar: 'https://avatars.githubusercontent.com/u/37131433?v=4',
name: 'Bhavya Dang',
bio: 'Web Developer and Designer',
website: 'https://synxc.carrd.co/',
followers: 11,
following: 25,
createdAt: 'Mar 7th, 2018',
location: 'India',
total_public_repos: 45,
total_private_repos: 'None'
}
Returns a repo object with the Repositiory data of the username passed as para.
Returns a orgs object with the Organization data of the username passed as para.
Returns an object containing the best match results of the user. Filtered by the query parameter passed.
Returns an object containing the best match results of the topic. Filtered by the query. The topic is always a featured topic.
You can contact me on my Discord (Sync#9069).
Found an issue? Open up an issue here!
© Sync-Codes, 2020
Released under MIT License.
FAQs
A simple node.js wrapper for the Github API V3
The npm package node-github.js receives a total of 0 weekly downloads. As such, node-github.js popularity was classified as not popular.
We found that node-github.js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.