
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
A gem providing that generates an API client gem based on an api defintion. The API defintions depend heavily on dry-validation contracts for header/request/response validation
add the following to you gemfile
gem "dryer_clients"
To generate a client gem for an API there are two steps:
Define the api. Check out the schema definition here. Note that this is schema is a subset of the schema used by dryer_routes, so any definition that works with the dryer_routes gem, will also work here.
Generate your client. I set up mine as part of a rake task.
Dryer::Clients::Gems::Create.call(
gem_name: 'my_special_gem_name,
output_directory: './generated/ruby_client,
api_description: './path_to_my_api_description_file',
contract_directory: './directory_where_all_my_dry-validation_contracts_are'
)
When run, this will output a gem in the specified output directory. It can be published/used like any other ruby gem.
Due to the loosey goosey nature of how ruby handles module loading, when passing in the contract directory, make sure that there are no external dependencies outside of the files passed in (other than the dry-validation gem), otherwise you will get a 'not found' error when the gem tries to load some class that is not included in the gem.
This gem is set up to be developed using Nix and
ruby_gem_dev_shell
Once you have nix installed you can run make env
to enter the development
environment and then make
to see the list of available commands
Please create a github issue to report any problems using the Gem. Thanks for your help in making testing easier for everyone!
Dryer Clients follows Semantic Versioning 2.0 as defined at https://semver.org.
This code is free to use under the terms of the MIT license.
FAQs
Unknown package
We found that dryer_clients demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.