
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
wow-api-sdk
Advanced tools
Node.js SDK for retrieving World of Warcraft character and item data via Blizzards API.
A simple and flexible SDK for interacting with the Blizzard World of Warcraft API. It provides streamlined access to character profiles, items, media, gear, specializations, and more—with built-in caching, token management, and error handling.
npm install wow-api-sdk
import { getCharacterData } from "wow-api-sdk";
const data = await getCharacterData("characterName", "realm");
console.log(data);
import {
getCharacterProfile,
getCharacterMedia,
getCharacterSpecializations,
getCharacterEquipment,
getItem,
getItemMedia,
} from "wow-api-sdk";
// Fetch character profile
const profile = await getCharacterProfile("eu", "twisting-nether", "scartx");
// Fetches the character's specializations including the active one (e.g. DPS, Healer, Tank).
const specs = await getCharacterSpecializations("eu", "Sylvanas", "Scartx");
console.log(specs.active_specialization.name); // e.g., "Holy"
// Get item data and media
const item = await getItem(18803, "en_GB", "us");
const itemMedia = await getItemMedia("us", 18803);
// Fetch character media with fallback
const characterMedia = await getCharacterMedia("eu", "Sylvanas", "Scartx");
// Returns the list of achievements earned by the character
const achievements = await getCharacterAchievements("eu", "Sylvanas", "Scartx");
console.log(
"First Achievement:",
achievements.achievements[0].achievement.name
);
// Returns the list of character titles the player has earned
const titles = await getCharacterTitles("eu", "Sylvanas", "Scartx");
console.log("First Title:", titles.titles[0].name);
// Returns the list of battle pets collected by the character
const pets = await getCharacterPets("eu", "Sylvanas", "Scartx");
console.log("First Pet:", pets.pets[0]?.creature?.name);
Function | Description |
---|---|
getCharacterProfile | Fetches core character info (level, race, class, etc.) |
getCharacterMedia | Retrieves character portraits and visuals |
getCharacterSpecializations | Returns active and inactive specialization data |
getCharacterEquipment | Fetches gear currently equipped by the character |
getItem | Retrieves item stats and metadata by ID |
getItemMedia | Fetches item icon and visual resources |
getCharacterAchievements | Returns earned achievements for the character |
getCharacterMounts | Returns all collected mounts |
getCharacterTitles | Returns character titles earned by the player |
getCharacterPets | Returns collected battle pets by the character |
getCharacterPvpSummary | Returns the character's PvP statistics and rankings |
All API functions implement try/catch blocks and throw descriptive errors when calls fail. The media fetching functions implement fallback to the default region (eu) if data is not found for the requested region, improving resilience.
try {
const media = await getCharacterMedia("us", "sylvanas", "nonexistent");
} catch (err) {
console.error("Error fetching character media:", err.message);
}
All API calls use fetchFromAPI()
which:
getAccessToken()
cacheGet()
/ cacheSet()
Region-based URLs are constructed via regionHost(region)
JSON responses are returned directly with no transformation
FAQs
Node.js SDK for retrieving World of Warcraft character and item data via Blizzards API.
The npm package wow-api-sdk receives a total of 3 weekly downloads. As such, wow-api-sdk popularity was classified as not popular.
We found that wow-api-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.