
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
⛔ This is a beta version that is not suitable for production use.
The Salesforce Composite API is an invaluable tool for loading complex data sets across orgs. It is also, unfortunately, verbose and time-consuming to implement.
sf-ent makes harnessing the Composite API fast and intuitive. Use it interactively from the command line or programmatically as a script library. Build requests and load data quickly.
npm install [--global] sf-ent
The CLI and script APIs are very similar. Commands and subcommands for each use the same names.
The primary difference is that the CLI will prompt you for required inputs and provides object and field auto-completion based on the schema of an authenticated org. Some CLI commands also support flags. Pass -h or --help with any command to learn more.
generateThe following shows an example of using the generate command to create a composite API request file with a single query subrequest:
CLI:
$ sfent generate --out ./query.json
$ # prompts will guide you to create the query
Script:
const { ent } = require('sf-ent');
// all commands are chainable and must be terminated by invocation of done(), returning a Promise that resolves to the command output
await ent()
.generate({ out: './query.json' })
.query('select id from recordType where sobjectType = \'Account\' and developerName = \'consumer\'')
.done();
Full documentation coming soon.
sf-ent appends the name of the class that constructs each Composite subrequest as a URL hash, a la:
{
// ...
"url": "/services/data/v60.0/query/?q=SELECT id FROM Account limit 1#Query_github.com/kev4ev/sf-ent#urlTypeInfo"
// ...
}
It does this so that the prototype can be inferred when a request is loaded into the CLI for interactive modification. Since hashes are not read by the server it has no effect on the request to Salesforce.
Happy Building!
FAQs
A declarative interface for working with the Salesforce Composite API
We found that sf-ent demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.