Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@artsy/cohesion
Advanced tools
Requirements: Yarn
yarn install
yarn test
yarn docs
To view docs locally, visit the full filepath of docs/index.html
in your browser, i.e, file:///Users/<MY_USER>/<MY_LOCAL_DIRECTORY>/cohesion/doc/index.html
The /Schema
directory represents the Artsy's analytics schema, and describes expectations for data consumed by Redshift and Segment.
This schema is maintained by Artsy's data team, engineers should not expect to change these files.
Valid analytics events are described in /Schema/Events/index.ts
, and individual event schemas live in the Schema/Events
directory, divided by concern.
Typings for all allowed values, such as ContextModule
, are exported for use by engineers in consuming projects.
Schema/Events
, add the name of the new event. This name defines the corresponding downstream table's name in Redshift, and should use the lowerCamelCase
naming convention.// Schema/Events/index.ts
export enum ActionType {
...
myNewEvent = "myNewEvent",
...
}
Schema/Events
directory, create a new interface describing the shape of the new event, as it is received in Segment/Redshift.ActionType
created in step 1, but use the UpperCamelCase
naming convention.action
key is required and should match the ActionType
created in step 1.ContextModule
, add new values to the existing typings in the Schema directory.// Schema/Events/MyNewEvent.ts
export interface MyNewEvent {
action: ActionType.myNewEvent
context_module: ContextModule
optional_property?: string
required_property: number
}
In Schema/Events/index.ts
, add the new interface to the valid events main list, Event
Add descriptive comments with examples to explain the use of your new event. Our documentation is generated automatically from in-code comments, find more information on syntax in the typedoc
docs.
If you have created any new files, add an export statement to Schema/index.ts
like so:
// Schema/index.ts
export * from "./Events/MyNewEvent"
v4.217.0 (Tue Nov 19 2024)
FAQs
Analytics schema
The npm package @artsy/cohesion receives a total of 2,468 weekly downloads. As such, @artsy/cohesion popularity was classified as popular.
We found that @artsy/cohesion demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.