Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
slackbotify
Advanced tools
Simple slackbot framework
npm install slackbotify
Creating a slackbot is as easy require the dependency, load the config and register a handler. Run it. Done. Slackbot is ready!
const Bot = require('slackbotify');
let bot = new Bot({
"bot": {
"token": "xoxb-XXXXX-XXXXX",
"name": "butler"
}
});
bot.registerHandler({
groups: ['direct'],
match: /hi/ig,
handler: function (message, callback) {
callback('Hi there! :smiley:');
}
});
bot.registerHandler({
groups: ['channel', 'direct'],
match: /:smile:/ig,
handler: function (message, callback) {
callback(':slightly_smiling_face:');
}
});
bot.run();
The only thing you have to pass to the constructor is a config object, and this config object should have at least a bot
object with 2 properties: token
& name
. (example above)
To register a handler to the bot simple pass an object to the registerHandler
function. This object needs to contain the following properties: group
, match
, handler
.
The group defines where the command is available. There are 3 groups. channel
, direct
, admin
. Handlers which are registered to the 'channel' group will fire when a message is send in a channel where the bot is invited to. 'Direct' handlers are private messages to the bot, and the 'admin' group handlers can only be called by an admin user in a private message.
A handler can be registered to multiple groups. In the example above the first handler is listening to direct messages only. The second handler will be called when a :smile: is send in a private message or in a channel where the bot is in.
The 'match' property is what the message should match in order to get called. This can be a regex or a string.
The handler is a function which receives as the first argument the slack message object. The result of the matched message is located at message.matchResult
this is the parsed result by the .match()
function. The second argument is the callback. The response you give to that callback is send to the user, so basically what the bot will answer.
The current bots are using slackbotify
FAQs
Simple slackbot framework
The npm package slackbotify receives a total of 0 weekly downloads. As such, slackbotify popularity was classified as not popular.
We found that slackbotify demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.