
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
A highly customizable and versatile GraphQL client for React
More documentation is available at formidable.com/open-source/urql.
Apollo Client is a comprehensive state management library for JavaScript that enables you to manage both local and remote data with GraphQL. It offers a robust set of features including caching, error handling, and more. Compared to urql, Apollo Client is more feature-rich and has a larger community, but it can be more complex to set up and use.
Relay is a JavaScript framework for building data-driven React applications powered by GraphQL. It emphasizes performance and scalability, making it suitable for large applications. Relay is more opinionated and requires a specific setup, which can be more challenging for beginners compared to urql.
graphql-request is a minimal GraphQL client for Node and browsers. It is lightweight and easy to use, making it a good choice for simple applications or scripts. Unlike urql, it does not provide React hooks or built-in state management, so it requires more manual handling of data fetching and state.
FAQs
A highly customizable and versatile GraphQL client for React
The npm package urql receives a total of 297,526 weekly downloads. As such, urql popularity was classified as popular.
We found that urql demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 20 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.