Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@apexdevtools/metadata-gulp
Advanced tools
Downloader for Salesforce metadata to support Apex static analysis
Salesforce metadata download library. Pulls metadata from an org in a format that can be used with apex-ls based tools to perform off-line semantics analysis of Apex code.
To start a download use update() from Gulp:
async update(
workspacePath: string,
logger: Logger,
connection: JSConnection | null,
namespaces: string[],
partialLoad: boolean
): Promise<void>
The workspacePath must be the directory where your sfdx-project.json file is located. The metadata is downloaded into a '.apexlink/gulp' directory relative to this.
If you have an open jsforce connection you can pass that, if you pass null a new connection will be created.
Metadata is download independently for each passed namespace. For orgs without a namespace you can use the pseudo namespace unmanaged. If partialLoad is false, existing downloaded metadata for namespaces not passed to update() will be removed automatically.
The library also supplies some helper functions that you may find useful.
To obtain the org's default namespace:
async getOrgNamespace(
workspacePath: string,
connection: JSConnection | null
): Promise<string | null | undefined>
This will return string | null on success or undefined if the Organization table can not be queried.
To obtain the namespace & package description for packages with namespaces on the org:
async getOrgPackageNamespaces(
workspacePath: string,
connection: JSConnection | null
): Promise<NamespaceInfo[]>
This project uses the pnpm
package manager.
pnpm install
pnpm build
To run unit tests:
pnpm test
To test bundling using webpack:
pnpm test:pack
node test-bundle/bundle.js
This should execute without error.
Execute manual test script with ts-node
using the run script:
# Run gulp on a project with an existing default org
pnpm run:script -- ./src/scripts/main.ts <workspaceDir> <namespace | unmanaged>
All the source code included uses a 3-clause BSD license, see LICENSE for details.
3.0.1 - 2023-12-08
rimraf
no longer having default export.FAQs
Downloader for Salesforce metadata to support Apex static analysis
The npm package @apexdevtools/metadata-gulp receives a total of 2 weekly downloads. As such, @apexdevtools/metadata-gulp popularity was classified as not popular.
We found that @apexdevtools/metadata-gulp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.