
Product
Socket MCP Adds Org Alerts, Threat Feed Review, and Package Inspection
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.
This tool is for who wants to use the twitter api with Oauth 1.0a easily using node.js. You need your access keys, and the whole thing is made by twurl :) This tool is made upon promises, because promises are awesome. Enjoy.
To install and use properly you must install twurl first:
gem install twurl && sudo cp /usr/local/twurl $PWD/
Just set your consumer keys to start to use:
twurl authorize --consumer-key <key> \
--consumer-secret <key-secret>
const twitt = require('twwk');
(async () => {
const request = await twitt({
method: 'GET',
path: '/1.1/search/tweets.json?q=twurl',
host: 'api.twitter.com' // default
} /* you can put the host here too */);
const { stdout: json } = request;
console.log(json);
})();
You can choose any path, any host, and the methods that you want.
FAQs
A simple API to manipulate twitter requests Oauth 1.0a through twurl.
The npm package twwk receives a total of 4 weekly downloads. As such, twwk popularity was classified as not popular.
We found that twwk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.