
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
This package resolve issue with certificate (https)
Error: unable to verify the first certificate
npm install node-mage2
"use strict";
const Magento2 = require('node-mage2');
//instantiate the client object
const options = {
authentication: {
integration: {
access_token: 'ACCESS_TOKEN_FROM_INTEGRATION_ADMIN_SECTION'
}
}
}
const mageClient = new Magento2('http://magento.root.url', options)
//basic usage
mageClient.get('/V1/products', {searchCriteria: { /*...*/ }}) //Get a list of all products
.then(products => {
//do something with the returned product data
})
mageClient.put('/V1/products/SKU_123', {visibility: 1}) //update product SKU_123
.then(product => {
//product data that's been modified to be invisible
})
mageClient.post('/V1/products', { /*A product entity*/}) //Create a new product
.then(product => {
//the created product object
})
mageClient.delete('/V1/procucts/SKU_123') //delete the product SKU_123
Helpers add a Javascript style API to generate the URLs.
"use strict";
const Magento2 = require('node-mage2');
//instantiate the client object
const options = {
authentication: {
integration: {
access_token: 'ACCESS_TOKEN_FROM_INTEGRATION_ADMIN_SECTION'
}
}
}
const mageClient = new Magento2('http://magento.root.url', options)
//initialise the helpers
mageClient.init();
//use the api
mageClient.catalog.product.get('SKU_123').then(product => {}) //get a product
mageClient.configProduct('CONFIG_123').options.get().then(options => {}) //get the options for a configurable
{
url: null,
store: 'default', //set a store to contextualise in
authentication: {
login: {
type: 'admin', //admin or customer
username: undefined,
password: undefined
},
integration: { //from the integrations section in the magento2 backend
consumer_key: undefined,
consumer_secret: undefined,
access_token: undefined,
access_token_secret: undefined
}
}
}
FAQs
Node JS library to connect to magento 2 API using promises
We found that node-mage2 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.