Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
ra-data-fakerest
Advanced tools
Client-side data provider for react-admin, the frontend framework for building admin applications on top of REST/GraphQL services.
This package takes a JSON object as input, then creates a client-side data provider around it - no backend involved. The provider issues no HTTP requests, every operation happens locally in the browser. It's ideal to run e2e tests without an API server, or to showcase an admin only with a static server.
All operations carried out in react-admin are local to the browser, and last only for the current browser session. A browser refresh erases all modifications.
npm install --save ra-data-fakerest
Pass a JSON object to the provider constructor:
// in src/App.js
import * as React from "react";
import { Admin, Resource } from 'react-admin';
import fakeDataProvider from 'ra-data-fakerest';
const dataProvider = fakeDataProvider({
posts: [
{ id: 0, title: 'Hello, world!' },
{ id: 1, title: 'FooBar' },
],
comments: [
{ id: 0, post_id: 0, author: 'John Doe', body: 'Sensational!' },
{ id: 1, post_id: 0, author: 'Jane Doe', body: 'I agree' },
],
})
import { PostList } from './posts';
const App = () => (
<Admin dataProvider={dataProvider}>
<Resource name="posts" list={PostList} />
</Admin>
);
export default App;
Additionally, you can turn on console logging of fake requests by passing true
as second parameter of the constructor.
The main parameter must be an object literal with one key for each resource type. Values are arrays of resources. Resources must be object literals with at least an id
key.
Foreign keys are also supported: just name the field {related_resource_name}_id
and give an existing value.
Here is an example input:
{
"posts": [
{ "id": 0, "title": "Hello, world!" },
{ "id": 1, "title": "FooBar" }
],
"comments": [
{ "id": 0, "post_id": 0, "author": "John Doe", "body": "Sensational!" },
{ "id": 1, "post_id": 0, "author": "Jane Doe", "body": "I agree" }
]
}
You can find a more sophisticated example in the Posters Galore demo.
Pass true
as second argument to log the requests made to the provider in the console. This is very helpful to debug the requests made by an app using this data provider.
// in src/App.js
import * as React from "react";
import { Admin, Resource } from 'react-admin';
import fakeDataProvider from 'ra-data-fakerest';
const dataProvider = fakeDataProvider({ /* data here */ }, true);
const App = () => (
<Admin dataProvider={dataProvider}>
// ...
</Admin>
);
This data provider uses FakeRest under the hood. That means that it offers the same features:
q
full-text searchThis data provider is licensed under the MIT License, and sponsored by marmelab.
FAQs
JSON Server data provider for react-admin
The npm package ra-data-fakerest receives a total of 4,462 weekly downloads. As such, ra-data-fakerest popularity was classified as popular.
We found that ra-data-fakerest demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.