
Security News
npm Tooling Bug Incorrectly Marks One-Character Packages as Security Holders
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.
kcl-lang.io/kcl-openapi
Advanced tools
The work on this project is mainly based on go-swagger, and this project just adds some KCL-specific templates and language features to it. We are grateful and sincerely respectful for the outstanding work in go-swagger. Meanwhile, we are working on making the customized features separated from the basic OpenAPI logic in go-swagger.
Main use cases:
The package translates Swagger OpenAPI spec and Kubernetes CRD to KCL models.
The package now supports OpenAPI 2.0. By parsing the "Definitions" section of the spec, the KCL OpenAPI package will extract the defined models from it and generate the corresponding KCL representation.
Note: The Kubernetes KCL models among all versions are pre-generated, you get it by executing
kcl mod add k8s:<version>under your project. Alternatively, if you may want to generate them yourself, please refer Generate KCL Packages from Kubernetes OpenAPI Specs.
The package can also translate
the Kubernetes CRD to KCL models.
By parsing the spec.versions[n].schema.openAPIV3Schema (n means the latest version of the spec will be used) section of the CRD, the KCL
OpenAPI package will extract the structural schema and generate the corresponding KCL representation.
The KCL OpenAPI Spec defines a complete specification of how OpenAPI objects are mapped to KCL language elements.
Apache License Version 2.0
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.

Research
/Security News
Newer packages in this compromise use native extensions and .pth loaders to execute JavaScript stealers in developer environments.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.