
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
The official JavasScript SDK for TrueVault. For more information about TrueVault, check out our website and API documentation. To see how the SDK is used in a real application, check out the TrueVault React Sample App.
Note: This SDK is only supported for the latest release of Chrome.
Simply copy this line into your HTML:
<script src="https://unpkg.com/tv-js-sdk@0.1.0/build/index.js"></script>
First download the package using yarn or npm.
yarn add tv-js-sdk
// OR
npm install tv-js-sdk
Then import the JS SDK into your project:
import TrueVaultClient from 'tv-js-sdk';
const TrueVaultClient = require('tv-js-sdk');
Initialize a TrueVaultClient using an access token or API key
const tvClient = new TrueVaultClient(apiKeyOrAccessToken);
You can also create a new TrueVaultClient by logging in:
const tvClient = await TrueVaultClient.login(accountId, username, password, mfaCode);
The methods in this SDK make asynchronous web requests to TrueVault and return Promises. We recommend using async/await in favor of Promises wherever possible for clarity and conciseness.
async readTrueVaultDocument() {
try {
const response = await tvClient.readDocument(vaultId, documentId);
console.log(response);
} catch (err) {
console.error(err);
}
}
readTrueVaultDocument() {
tvClient.readDocument(vaultId, documentId).then(response => {
console.log(response);
}).catch(err => {
console.error(err);
});
}
Test out the SDK with this simple JSFiddle example.
Make changes to index.js and then bundle them into build/index.js with webpack:
./node_modules/.bin/webpack
This SDK is released under the BSD 3-Clause License.
FAQs
The official TrueVault JavaScript SDK
We found that tv-js-sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.