Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
t1c-sdk-js
Advanced tools
The Trust1Connector SDK (t1c-sdk-js), is a javascript library to facilitate the integration with the Trust1Connector. The library simplifies the execution to the connector and works asynchronously. This is version 3 of the library, and is intended to be used with Trust1Connector v3+. For previous versions (v1 and v2), please refer to: t1c-lib-js (v1/v2)
When the Trust1Connector isn’t installed the library will return an uninitialised client which can be used to download a client installer.
Documentation is available on gitbook.
The library will detect the installed version of Trust1Connector and will only function with version 3.0.0 and higher.
If you have version 1/2.x.x installed you have two options:
$ npm i trust1connector@2.4.3
For security reasons v1 and v2 are deprecated
We're present on Gitter in the following room: Trust1Connector-gitter
[on Mac M2] Make sure you install perl
brew install perl
and update hte .zshrc
Node version 19
npm install --global webpack
To build the Trust1Connector JS SDK yourself you need to do the following:
$ yarn
// or
$ npm install
$ yarn build-prod
// or
$ npm run build-prod
The outcome can be found in the folders
Starting from node 17 the OpenSSL provider has been updated. To build the SDK export the following variable
export NODE_OPTIONS=--openssl-legacy-provider
Verify the dependencies, actual vs new versions
npm outdated
To build the library locally
yarn build-dev
This will create a T1CSdk.js in the dist folder
Make sure you have NodeJS installed on your machine. Use of Yarn is recommended but not required.
Webpack is needed to build the Javascript library
$ npm install --global webpack
Navigate to the root directory and use Yarn to download and the necessary dependencies
$ yarn
Use npm install
$ npm install
To publish to NPM you need to be logged in to the Trust1Team NPM account. You can do this by running:
publish will by default add the latest
tag.
npm publish
to push with a specific tag use
npm publish --tag some-tag-name
This file is part of the Trust1Team(R) sarl project.
Copyright (c) 2020 Trust1Team sarl
Authors: Trust1Team development
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU Affero General Public License version 3
as published by the Free Software Foundation with the addition of the
following permission added to Section 15 as permitted in Section 7(a):
FOR ANY PART OF THE COVERED WORK IN WHICH THE COPYRIGHT IS OWNED BY Trust1T,
Trust1T DISCLAIMS THE WARRANTY OF NON INFRINGEMENT OF THIRD PARTY RIGHTS.
This program is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU Affero General Public License for more details.
You should have received a copy of the GNU Affero General Public License
along with this program; if not, see http://www.gnu.org/licenses or write to
the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
Boston, MA, 02110-1301 USA.
The interactive user interfaces in modified source and object code versions
of this program must display Appropriate Legal Notices, as required under
Section 5 of the GNU Affero General Public License.
You can be released from the requirements of the Affero General Public
License by purchasing a commercial license. Buying such a license is
mandatory if you wish to develop commercial activities involving the Trust1T
software without disclosing the source code of your own applications.
Examples of such activities include: offering paid services to customers as
an ASP, signing PDFs on the fly in a web application, shipping OCS with a
closed source product...
Irrespective of your choice of license, the T1T logo as depicted below may
not be removed from this file, or from any software or other product or
service to which it is applied, without the express prior written permission
of Trust1Team sarl.
The T1T logo is an EU Registered Trademark (n° 12943131).
FAQs
Trust1Connector JavaScript SDK
The npm package t1c-sdk-js receives a total of 181 weekly downloads. As such, t1c-sdk-js popularity was classified as not popular.
We found that t1c-sdk-js demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.