Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
GraphQL-Server is a base library that serves as a helper for building GraphQL servers or integrations into existing web frameworks using GraphQL-Core.
Server integration | Docs |
---|---|
Flask | flask |
Sanic | sanic |
AIOHTTP | aiohttp |
WebOb (Pyramid, TurboGears) | webob |
Server integration | Package |
---|---|
WSGI | wsgi-graphql |
Responder | responder.ext.graphql |
Server integration | Package |
---|---|
Django | graphene-django |
The graphql_server
package provides these public helper functions:
run_http_query
encode_execution_results
load_json_body
json_encode
json_encode_pretty
NOTE: the json_encode_pretty
is kept as backward compatibility change as it uses json_encode
with pretty
parameter set to True
.
All functions in the package are annotated with type hints and docstrings,
and you can build HTML documentation from these using bin/build_docs
.
You can also use one of the existing integrations listed above as blueprint to build your own integration or GraphQL server implementations.
Please let us know when you have built something new, so we can list it here.
See CONTRIBUTING.md
FAQs
GraphQL Server tools for powering your server
We found that graphql-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.