
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
webfinger-client
Advanced tools
A webfinger client that runs both in the browser and in node.js. The Client is based on Nick Jennings library webfinger.js but has been rewritten in TypeScript.
Check out the Demo at GitHub Pages: https://d-koppenhagen.github.io/webfinger/
host-meta or host-meta.json URI endpoints)clone this repository, run npm install and finally npm start
Install the client as a dependency:
npm install --save webfinger-client
You have to import the module before using it:
import { WebFinger } from 'webfinger';
let webfinger = new WebFinger({
webfistFallback: true, // defaults to false
tlsOnly: true, // defaults to true
uriFallback: false, // defaults to false
requestTimeout: 10000, // defaults to 10000
});
webfinger.lookup('alice@example.org', function (err, p) {
if (err) {
console.log('error: ', err.message);
} else {
console.log(p);
}
});
// example output:
// {
// idx: {
// properties: {
// name: "Alice Henderson"
// },
// links: {
// avatar: [{ href: '<url>' }],
// blog: [{ href: '<url>' }],
// vcard: [href: '<url' }]
// ... etc.
// },
// }
// json: { ... raw json output ... }
// object: { ... unformatted but parsed into native javascript object ... }
// }
webfinger.lookupLink('alice@example.org', 'remotestorage' function (err, p) {
if (err) {
console.log('error: ', err.message);
} else {
console.log(p);
}
});
// example output (if at least one link with rel="remotestorage" exists):
// {
// href: 'https://storage.5apps.com/alice',
// rel : 'remotestorage',
// properties: {
// 'http://remotestorage.io/spec/version': 'draft-dejong-remotestorage-02',
// 'http://tools.ietf.org/html/rfc6749#section-4.2': 'https://5apps.com/rs/oauth/alice',
// 'http://tools.ietf.org/html/rfc6750#section-2.3': false,
// 'http://tools.ietf.org/html/rfc2616#section-14.16': false
// }
// }
The library is built with Webpack. Notes for building and serving can be fount in DEVELOPMENT.
FAQs
[![NPM version][npm-image]][npm-url]
We found that webfinger-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.