
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
steam-inventory-api-ng
Advanced tools
An inventory API for Steam with advanced features such as retries and proxy support
A Steam Inventory API wrapper with advanced features such as retries and proxy support.
npm install steam-inventory-api-ng
My former forked version (steam-inventory-api-fork) of the original steam-inventory-api is no longer going to be maintained, however it will stay up for any old projects. This will be the new place for any new development. It didn't seem right to keep developing inside a fork so therefore ng (next generation) was appropriate.
This module is developed with the goal of adding new features to existing inventory fetchers, mostly DoctorMcKay's node-steamcommunity getUserInventoryContents call. The newer features added are:
As this module is designed to add on functionality, any former project using node-steamcommunity's getUserInventoryContents can easily be ported over to this project. Some of the code base is recycled, such as items will be returned as CEconItem objects.
It's worth noting that if an inventory is private or not found more requests will not be done.
For documentation see doc.md.
Please see any examples in the examples folder.
To get any logging events just use something like below:
inventoryApi.on('log', (type, message, steamid) => {
console.log(`${type} - ${steamid} - ${message}`);
});
See doc.md for jsdoc
FAQs
An inventory API for Steam with advanced features such as retries and proxy support
We found that steam-inventory-api-ng demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.