Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
= yelp
A Ruby object-oriented interface to the local business content available on Yelp at http://www.yelp.com. Functionality is provided to perform all searches available via the developer API including:
More detailed information on the underlying Yelp API, error response codes, and so forth is available at http://www.yelp.com/developers/getting_started.
The RubyForge project is hosted at http://rubyforge.org/projects/yelp. This documentation is available at http://yelp.rubyforge.org.
The latest source code is at http://github.com/shaper/yelp.
== About
Everybody loves Yelp! For those seeking burritos in the Mission District of San Francisco, it's easy to feel awash in a sea of taquerias with little to go on for decision-making other than whether the rice has peas in it (generally a negatory data point) or how long the line happens to be around lunchtime.
Worry no longer! Yelp is here.
Why should you use this library rather than writing directly to their API, or rolling your own? A few reasons that come to mind:
== Requirements
You must have a Yelp Web Service ID (YWSID) available at http://www.yelp.com/developers/getting_started/api_access.
You must conform to the Yelp Branding Requirements when making use of content retrieved via their API, documented at http://www.yelp.com/developers/getting_started/api_branding.
For tests to execute successfully you must have the YWSID set in your environment via (shell-dependent, bash example provided):
% export YWSID='YOUR_ID_HERE'
== Installing
Install +rubygems+ if you don't already have it. See http://rubyforge.org/projects/rubygems/.
Then install the +yelp+ gem by executing:
% gem install yelp
== Usage
Instantiate a Yelp::Client and use its +search+ method to make requests of the Yelp server.
The available search request types are:
By default, response content is formatted as a Ruby hash converted from Yelp's source JSON response content. Alternate response formats (including the original pure JSON) can be specified on request record construction via the Yelp::Request +response_format+ parameter, available in all request record types.
A few examples:
client = Yelp::Client.new
request = Yelp::Review::Request::Location.new( :address => '650 Mission St', :city => 'San Francisco', :state => 'CA', :radius => 2, :term => 'cream puffs', :yws_id => 'YOUR_YWSID_HERE') response = client.search(request)
request = Yelp::Review::Request::Location.new( :city => 'San Francisco', :state => 'CA', :category => [ 'donuts', 'icecream' ], :yws_id => 'YOUR_YWSID_HERE') response = client.search(request)
request = Yelp::Neighborhood::Request::GeoPoint.new( :latitude => 37.782093, :longitude => -122.483230, :yws_id => 'YOUR_YWSID_HERE') response = client.search(request)
request = Yelp::Phone::Request::Number.new( :phone_number => '4155551212', :yws_id => 'YOUR_YWSID_HERE') response = client.search(request)
If you want to convert some addresses to latitude/longitude, or vice versa, for testing or what have you -- try http://stevemorse.org/jcal/latlon.php.
== License
This library is provided via the GNU LGPL license at http://www.gnu.org/licenses/lgpl.html.
== Authors
Copyright 2007 - 2009, Walter Korman shaper@fatgoose.com, http://lemurware.blogspot.com
FAQs
Unknown package
We found that jonnii-yelp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.