
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
serverpilot
Advanced tools
This is a simple Node.JS wrapper to communicate with the ServerPilot API.
Check out the official ServerPilot API documentation for more information on using the ServerPilot API.
To start making calls to ServerPilot from Node.JS, install it with NPM:
$ npm install serverpilot --save
Log into your ServerPilot account, navigate to the Account section, and click API. Generate an API Key.
See the below example to list all of your servers.
var ServerPilot = require('../lib/serverpilot');
var sp = new ServerPilot({
clientId: <YOUR CLIENT ID>,
apiKey: <YOUR API KEY>
});
// List out servers
var servers = sp.getServers( function(err, data) {
if ( err ) { console.log( err.message ); }
// This is where you would do something with the data
console.log(data.data);
});
See the examples folder for more.
To run tests, ensure you have Mocha installed on your system.
$ npm install -g mocha
Next, set your environmental variables like this:
$ export SP_CLIENT_ID=YOURCLIENTID SP_API_KEY=YOURAPIKEY
Then run all the tests using this handy shortcut:
$ npm test
Or run an individual test like this:
$ mocha test/apps.test.js -t 15000
MIT. See the License file for more info.
FAQs
A Node wrapper to communicate with the ServerPilot API
The npm package serverpilot receives a total of 1 weekly downloads. As such, serverpilot popularity was classified as not popular.
We found that serverpilot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.