
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
github.com/mamemaki/submit-sitemap
submit-sitemap is a command line tool to submit a sitemap to search engines (Google/Bing).
Download the executable from Github releases according to your platform.
Ubuntu(PowerShell):
wget https://github.com/mamemaki/submit-sitemap/releases/download/v1.0.0/submit-sitemap_Windows_x86_64.zip -outfile $pwd\submit-sitemap.zip
Expand-Archive submit-sitemap.zip
.\submit-sitemap\submit-sitemap.exe -v
Ubuntu:
wget https://github.com/mamemaki/submit-sitemap/releases/download/v1.0.0/submit-sitemap_Linux_arm64.tar.gz
tar -xvzf submit-sitemap_Linux_arm64.tar.gz
./submit-sitemap -v
go install github.com/mamemaki/submit-sitemap@v1
or
go run github.com/mamemaki/submit-sitemap@v1 -f=https://example.com/sitemap.xml -t=google
To submit a sitemap to Google:
submit-sitemap -f=https://example.com/sitemap.xml -t=google
To submit a sitemap to Google and Bing:
submit-sitemap -f=https://example.com/sitemap.xml -t=google,bing
The following are submit-sitemap's command-line options:
Usage:
submit-sitemap [flags]
Flags:
-f, --feedurl string The sitemap URL to submit. e.g. https://example.com/sitemap.xml
-t, --target strings The target search engines(google/bing) (default [])
--dry-run Output the operations but do not execute anything
--verbose Enable verbose output mode
--google-siteurl string The URL of the property as defined in Search Console. For example: https://example.com/ (URL-prefix property), or sc-domain:example.com (Domain property). If omitted, we will guess it from feedurl. If your site in Google Search Console is Domain property, you have to use this option explicitly.
--google-feedpath string FeedUrl for Google. If omitted, we will guess it from feedurl. e.g. https://example.com/sitemap.xml
--bing-siteurl string Site URL for Bing. If omitted, we will guess it from feedurl. e.g. http://example.com
--bing-feedpath string FeedUrl for Bing. If omitted, we will guess it from feedurl. e.g. https://example.com/sitemap.xml
-h, --help help for submit-sitemap
-v, --version version for submit-sitemap
We use the Google Search Console API to submit a sitemap to the site property(URL-prefix or Domain).
We use Service Account authentication. other authentication method is not supported.
To authenticate your Service Account when submit a sitemap, set the contents of the credential JSON to the environment variable(GOOGLE_APPLICATION_CREDENTIALS_JSON
).
If your site on Google Search Console is Domain property, you have to use the --google-siteurl
option explicitly as shown below.
To submit a sitemap to Google that uses Domain property:
submit-sitemap -f=https://example.com/sitemap.xml -t=google --google-siteurl=sc-domain:example.com
We use the Bing Webmaster API to submit a sitemap to the site on Bing.
To authenticate, set the API Key to the environment variable(BING_APIKEY
).
Please refer to Getting Access to the Bing Webmaster Tools API.
Google and Bing have stopped supporting sitemap ping due to spam issues(ref, ref2). Therefore, if we want to submit a sitemap, we must use an authenticated API.
Indexing API and IndexNow are per-URL index request APIs. These APIs and sitemap submissions have different purposes as follows.
Request unit | Indexing speed | Purpose | |
---|---|---|---|
Indexing API and IndexNow | URL | in few mins | Request indexing of specific URLs as soon as possible |
Submit a sitemap | Sitemap | in few days | Let search engines know that the site has been updated |
Contributions are welcome via pull requests. Please see here for more information.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.