Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
peertube-client
Advanced tools
client for peertube rest api
npm i peertube-client
This library handle all the oauth process for you just give an instance host, a username and a password and you are ready to go.
For now video upload is not supported, i cannot achive to make it work, pr are more than welcome :).
Let's demonstrate simple usage with :
import { Peertube } from 'peertube-client';
const peertube = new Peertube({
instance: 'peertube.fr',
user: 'jonsnow',
password: 'foo',
});
const main = async () => {
try {
const me = await peertube.whoAmI();
const videos = await peertube.getVideos();
const video = await peertube.getVideo(2345);
/* ... */
} catch (err) {
console.error(err);
}
};
Execute yarn release
which will handle following tasks:
releases are handled by awesome standard-version
1.1.2
to 1.1.2-0
:npm run release --prerelease
1.1.2
to 1.1.2-alpha.0
:npm run release --prerelease alpha
1.1.2
to 1.1.2-beta.0
:npm run release --prerelease beta
See what commands would be run, without committing to git or updating files
npm run release --dry-run
npm run pack
OR npm run release:preflight
which will create a tarball with everything that would get published to NPMTest are written and run via Jest 💪
npm test
# OR
npm run test:watch
Style guides are enforced by robots, I meant prettier and tslint of course 🤖 , so they'll let you know if you screwed something, but most of the time, they'll autofix things for you. Magic right ?
#Format and fix lint errors
npm run style:fix
npm run docs
WIP: something done
( if you do this please squash your work when you're done with proper commit message so standard-version can create Changelog and bump version of your library appropriately )npm run commit
- will invoke commitizen CLI
MIT as always
FAQs
client for peertube rest api
The npm package peertube-client receives a total of 2 weekly downloads. As such, peertube-client popularity was classified as not popular.
We found that peertube-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.