
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
uoft-canvas-api
Advanced tools
Canvas API functions bundled as a NPM package for Node.js.
These instructions will get you a copy of the project up and running on your local machine for use with your own API tokens and Canvas domains.
To use with node:
$ npm install uoft-canvas-api
Then, in wherever you want to use this package:
const canvasAPI = require('uoft-canvas-api')
Rename the sample.env file to .env and add your institution's domain and API access token.
CANVAS_API_TOKEN={YOUR_TOKEN_FROM_QUERCUS}
CANVAS_API_DOMAIN=https://q.utoronto.ca/api/v1
Attached to the canvasAPI are a bunch of functions.
Run the attached functions!
const canvasAPI = require('uoft-canvas-api')
canvasAPI.getSelf()
.then(self => console.log(self))
const { getUsersInCourse, getOptions } = require('uoft-canvas-api')
getUsersInCourse(12345, getOptions.users.enrollmentType.student) // first argument is Canvas course ID
.then(students => console.log(students))
Contributions are welcome and greatly appreciated!
source directory (and not the src directory. This directory is generated by Rollup during the build phase, and is what gets published to npm.)source, please add the file to the existing index.js inside source, so that during the build your contribution will be included in src.src, and running it.source folder (say that the new file you want to add is getUsersWithGradeThreshold.js)source folder, there’s an index.js file that lists all of the files you want exported to src. There you will add: export { default as getUsersWithGradeThreshold } from './getUsersWithGradeThreshold'npm run build, which will build the project and output your new function into src.index.js at the root of the project that you create (this is not the index.js that’s in the source folder), import your new file from src like this: const getUsersWithGradeThreshold = require('.src/getUsersWithGradeThreshold') and test by running the code: node index.js.This project is licensed under the MIT License.
FAQs
Canvas LMS API for Node
We found that uoft-canvas-api demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.