Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
This gem aims to provide a simple, programmatic ruby client that allows native ruby applications to seamlessly interact with Transport for London's live APIs.
Add this line to your application's Gemfile:
gem 'tfl_api_client'
And then install via bundler:
$ bundle install
Or install it yourself as:
$ gem install tfl_api_client
The TFL API Client supports Ruby 2.0.0 or higher.
TFL API Client has been designed to be as simple as possible to work with.
To use the TFL API, developers should register for a set of API credentials (an Application ID and Application Key).
Once valid API credentials have been obtained, you will need to pass the Application ID and Application Key upon initialisation of the client:
@client = TflApi::Client.new(app_id: TFL_APP_ID, app_key: TFL_APP_KEY)
In addition to the above mandatory parameters, a number of optional parameters can be passed:
Option | Default Value | Description |
---|---|---|
host | https://api.tfl.gov.uk | TFL API's host url |
logger | a new Logger instance | Logger object to log into |
log_level | INFO | The log level to logging at |
log_location | STDOUT | Location to send all logs (can be a file or STDOUT) |
Full documentation can be found on the project's ruby docs.
See the CHANGELOG for a list of changes.
This project started in order to fill a gap in the current offers for gems that provide a programmatic interface to TFL's API.
The TFL API Client gem was originally developed by Luke Hackett, and is not an official TFL client.
In the spirit of free software, everyone is encouraged to help improve this project.
Here are some ways in which you can contribute:
I utilise the GitHub issue tracking to track bugs and features. Before submitting a bug report or feature request, check to make sure it hasn't already been submitted.
When submitting a bug report, please include a Gist that includes a stack trace and any details that may be necessary to reproduce the bug, including your gem version, Ruby version, and operating system.
Ideally, a bug report should include a pull request with failing specs.
feature/my-new-feature
.The contributing guidelines was inspired by Middleman-Heroku and Factory Girl.
Copyright (c) 2015 - 2018 Luke Hackett. MIT Licensed, see LICENSE for details.
FAQs
Unknown package
We found that tfl_api_client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.