
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A module to access the PullString Web API. The Web API lets you add text or audio conversational capabilities to your apps, based upon content that you write in the PullString Author environment and publish to the PullString Platform.
This package provides a module to access the PullString Web API.
The PullString Web API lets you add text or audio conversational capabilities to your apps, based upon content that you write in the PullString Author environment and publish to the PullString Platform.
To get the latest build of the SDK, run
npm install pullstring
(assumes you have Node JS intalled).
Below is a barebones example of starting a conversation with the PullString Web API. It will print the inital content under
the default Activity for your Project. The code assumes you have defined MY_API_KEY and MY_PROJECT_ID string with
the appropriate IDs. You can find these in the settings for your project in your account on pullstring.com.
We've included the API key and Project ID for the example Rock, Paper, Scissors chatbot.
var PS = pullstring;
const MY_API_KEY = '9fd2a189-3d57-4c02-8a55-5f0159bff2cf';
const MY_PROJECT_ID = 'e50b56df-95b7-4fa1-9061-83a7a9bea372';
var request = new PS.Request({
apiKey: MY_API_KEY,
});
var conversation = new PS.Conversation();
conversation.onResponse = function(response) {
for (var output of response.outputs) {
console.log(output.text);
}
};
conversation.start(MY_PROJECT_ID, request);
// > 'Do you want to play Rock, Paper, Scissors?'
In the examples directory are some simple examples demonstrating how to use the SDK to hold conversations.
The chat-text.html demo is text-base chat client that connects to the Rock, Paper, Scissors chatbot using the
above API key and Project ID. The second example, chat-speech.html, uses the Web API's speech recognition abilities
with the same bot. If you swith to a project containing audio files in the responses, that audio will play as well. Note
that not all browsers support recording audio. There are versions of each example using the browser SDK and the Node
SDK. The browser versions can be simply opened in the browser. For the node examples, first start the server.
cd examples/
node server.js
The JavaScript SDK can be built for the browser and Node JS. When building for the browser, Node is still required to build the SDK and run the unit tests. The SDK is written in ES6 and uses Babel and Webpack to generate a minified browser library. After ensuring Node JS is installed, run the following command to install the necessary build dependencies.
npm run init
Next, run the following command to build the library and run unit tests.
npm run build // macOS, Linux, etc
npm run build-win // Windows
It it possible to build for individual platforms.
npm run build-web // all OS's
npm run build-node // macOs, Linux, etc
npm tun build-node-win // Windows
The build output can be found at dist/web and dist/node. You can also run
the tests on their own, for all platforms or individually.
npm run test
npm run test-web
npm run test-node
There are reports of the unit test framework, Ava, not running correctly on Windows. Because of this, npm run build-win does not run tests as a part of the build process.
Documentation for this SDK can be found in docs/PullStringSDK.md. In addition, the PullString Web API specification can be
found at:
For more information about the PullString Platform, refer to:
To kick off a non-uglified, continuously updating development build for the browser:
npm run dev-web
This will create dist/web/pullstring.js
FAQs
A module to access the PullString Web API. The Web API lets you add text or audio conversational capabilities to your apps, based upon content that you write in the PullString Author environment and publish to the PullString Platform.
The npm package pullstring receives a total of 3 weekly downloads. As such, pullstring popularity was classified as not popular.
We found that pullstring demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.