
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
This is general SNS Client libs for most SNS platforms.
var snsclient = require('snsclient');
var factory = snsclient({
platform_nameA : {key: key, secret: secret},
platform_nameB : {key: key, secret: secret}
});
var client_nouser, client_withuser;
client_nouser = factory.createClient('platform_nameA'); // for no authorized_user
factory.setDefault('platform_nameA'); // set a default platform
client_nouser = factory.createClient(); // for no authorized_user and using default
// set user and using default
// you can get authorized_user by snsClient's function "authorize()"
client_withuser = factory.createClient(authorized_user);
some authorization may be redirecting page
// create a default client
var client = factory.createClient(), authorized_user;
client.authorize(req, res, function(err, user){
// if no err, user will be the authorized_user to be used in other CommonAPIs
authorized_user = user;
});
// create a default client with authorized_user
var client = factory.createClient(authorized_user);
client.friends_ids(null, /* you can set some API additional parameters here */
function(err, data){
//To handle data
});
acccount_info : get current user's info
friends_ids : get user's friends ids
appfriends_ids : get user's app friends(installed current application) ids
appfriends_info : get user's app friends detail info
is_app_user : check if the user installed current application
users_info : get user's info by ids array
FAQs
Multi-platform SNS client for node
We found that snsclient demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.