
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
officearchitect
Advanced tools
`OfficeArchitect.Web` is the data access endpoint for all OfficeArchitect client applications.
OfficeArchitect.Web is the data access endpoint for all OfficeArchitect client applications.
The sharepoint and Visio api are sectioned into their own areas, located in the Areas folder.
Contains the controllers for the OA web, including api controllers and content controllers.
Contains the signalR hubs. See Tasks section for more details.
Contains the tasks. Most (if not all) of the asynchronous tasks doable in OA web are actually off-loaded to a task queue.
Which is registered as a IHostedService. The tasks themselves then use the signalR hubs (via a hub context) to notify
the client of changes.
In Startup.cs, it is important that the OA custom redirect runs before the auth middleware
// removed
.UseOARedirect()
.UseAuthentication()
// removed
This is because we are using the root / as the callback path (which should ideally be changed).
If auth runs before, infinite loop will occur.
EnableDefaultContentItems has been disabled on this project. This is because, at the moment, we have a rather
non-standard usage of various different files, further more they are littered about everywhere (e.g. we have razor files
in the App folder). The default .net core publish mechanism - which has EnableDefaultContentItems set to true -
doesn't work well with this.
So for the moment, it has been disabled, and anything we want to be put in the publish folder should be explicitly
specified in the Publish item group block.
Default behaviour can be found here.
Install the Azure DevOps authentication tool using the following command:
npm install -g vsts-npm-auth --registry https://registry.npmjs.com --always-auth false
Authenticate with the registry feed:
vsts-npm-auth -config .npmrc
More information can be found here
FAQs
`OfficeArchitect.Web` is the data access endpoint for all OfficeArchitect client applications.
The npm package officearchitect receives a total of 1 weekly downloads. As such, officearchitect popularity was classified as not popular.
We found that officearchitect demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.