Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Info | Badges |
---|---|
Version | |
License | |
Popularity | |
Testing | |
Quality |
Note this module is in extremely early development. There are no tests yet, documentation is missing and versioning might be a little different. So don't use this in production at the moment - but feel free to play with it!
SlackFRP is a Node.js module for working with the various Slack APIs, built atop functional reactive programming principles.
The benefit of using functional reactive programming for such
a library means that events can be filter
ed, map
ped, reduce
ed,
and so on - just like arrays!
Functional Reactive code can also be very expressive while still remaining terse, and this makes maintainability an absolute dream.
SlackFRP can be installed by executing the following command in a terminal:
npm install slack-frp --save
SlackFRP tries to be as inexplicit as possible, and as such doesn't require much of a learning curve (even if functional reactive programming, observables and EventStreams are not quite your strong point).
Every event and method correlates directly to the events and methods listed on the Slack API documentation site, so if those docs expect a payload, just call the relevant method with the expected payload as a regular JS object.
Let's get started building a realtime bot that echoes out what users say.
First thing's first - we have to connect to the Slack API by passing in our bot's API token.
// import the module
var Slack = require('slack-frp');
// give it our token
var slack = new Slack('insert api token here');
That was pretty simple and straightforward - but now we need to connect to the RTM API. Simple enough:
slack.connect();
Boom. How's about we post a message to Slack letting users know we've connected?
slack.connect()
.onValue(function(response) {
slack.chat.postMessage({
text: "Hello! I'm now active on your team.",
channel: "#general"
});
});
Now, for the logic that echoes out what users say...
slack.events.message
.filter(function(message) {
return ~message.text.indexOf('bot echo');
})
.onValue(function(message) {
var echo = message.text.split('bot echo ')[1];
slack.chat.postMessage({
text: echo,
channel: message.channel
})
});
Putting it all together, we have something that looks like this:
// import the module
var Slack = require('slack-frp');
// give it our token
var slack = new Slack('insert api token here');
slack.events.message
.filter(function(message) {
return ~message.text.indexOf('bot echo');
})
.onValue(function(message) {
var echo = message.text.split('bot echo ')[1];
slack.chat.postMessage({
text: echo,
channel: message.channel
})
});
slack.connect()
.onValue(function(response) {
slack.chat.postMessage({
text: "Hello! I'm now active on your team.",
channel: "#general"
});
});
As you can see, the methods are fairly straightforward.
Any time you want to get access to a Slack RTM event, just
call slack.events.<event type>
.
Here's a list of all of them.
Similarly, if you want to use a particular Slack Web API method, just
call slack.<name of method group>.<name of method>
, so if you
wanted to post a message, it'd be slack.chat.postMessage
. If you
want to add a reaction, call slack.reactions.add
.
Here's a list of all the methods you can call.
FAQs
a terse, functional reactive slack api
The npm package slack-frp receives a total of 0 weekly downloads. As such, slack-frp popularity was classified as not popular.
We found that slack-frp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.