Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
World of Warcraft API gem.
This gem is intended to help developers easily access Blizzards' Community API section of World of Warcraft.
A supported, working version of Ruby.
You can obtain Wowapi in two ways:
gem install wowapi
git clone https://git.3lab.re/marahin/wowapi.git
cd wowapi
bundle install
gem build wowapi.gemspec
gem install --local wowapi**.gem
Bear in mind this is example code.
wowapi.rb
in your Rails app's config/initializers
directory,require 'wowapi'
## Set region (defaults to :eu)
## Wowapi.region = :us
## Create Api variable usable ANYWHERE in your Rails app
::Api = Wowapi.new do |config|
config.public_key = 'your-public-apikey'
## config.secret_key = 'your-secret-key'
end
## Create your Guild name variable, usually GuildName or GuildNameApi that holds information about your guild.
## ::YourGuildName = Api.guild('Realm', 'Guild name', :field1, :field2)
::Aspects = Api.guild('Argent Dawn', 'The Aspects', :members, :news)
Now, in any controller / view you can do:
controllers/pages_controller.rb
class PagesController < ApplicationController
def index
@news = Aspects.news
end
end
in views:
@news.last(7).each do |news|
...
end
require 'wowapi'
api = Wowapi.new do |config|
config.public_key = 'your-public-apikey'
# config.secret_Key = 'optional-secret-key'
end
# returns guild profile
guild = api.guild('Argent Dawn', 'The Aspects')
# returns guild profile & members list
guild = api.guild('Argent Dawn', 'The Aspects', :members)
guild.members # Array of CharacterClass objects
# returns guild profile, members list & news
guild = api.guild('Argent Dawn', 'The Aspects', :members, :news)
guild.news # array of Hashes containing news
# returns character profile
character = api.character('Argent Dawn', 'Marahin')
Nothing additional is required. Bear in mind that Wowapi only download & interprets data, but it does not provide any kind of persistent storage.
As an author I use this gem to develop my guild website, where I use nginx as an reverse proxy to puma instance with Rails app. I use redis to store Wowapi data and Clockwork queue, that is maintaining work of Sidekiq worker that periodically downloads data using Wowapi.
Everything >= 2.0.0 should work just fine. Below you can see a table with different MRI Ruby versions which we tested the gem on:
Ruby (MRI) | Does it work? |
---|---|
1.9.3 | No |
2.0.0 | Yes |
2.2.0 | Yes |
2.2.3 | Yes |
2.3.0 | Yes |
2.3.1 | Yes |
jruby* | Yes |
We are using Travis CI to test each commit against Supported Rubies.
Bugs: either drop an issue here or see IRC below
IRC: #wowapi
on Freenode (click here to chat now)
I have a problem / want to help:
#wowapi
on Freenode (or creator directly - me@marahin.pl
),SINCE 1.0.0 we use SemVer for versioning. For the versions available, see Releases or RubyGems.
This project is licensed under the MIT License - see the LICENSE.md file for details.
THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
FAQs
Unknown package
We found that wowapi demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.