Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@dfds-contentful/migration
Advanced tools
First time setup only
yarn migrate-auto --environment-id=<envId> --id=<typeId>
Downloads the json from type typeId
and creates corresponding migration scripts. This will work for the case when you
migration/migrations
, and a new or modified file in migration/contentTypes
yarn migrate-manual --id=<typeId>
If the automatic migration is not possible, we use this script to create a dummy migration file which you have to fill in manually, the syntax for migrations is described here. https://github.com/contentful/migration-cli#reference-documentation
yarn migrate-reorder --environment-id=<envId>
Tests if any of the migrations in the local setup have been applied out of order (relative to the specified environment) and offers to reorder them.
yarn migrate-interfaces --id=<typeId>
Copies editor interfaces from the 'dev' environment to target environment for a specific type. Not needed the first time a type is auto-migrated.
yarn migrate-apply --environment-id=<envId>
Applies remaining migrations on a Contentful environment.
Note: A singleton entry of type migrationLog is used to kept track how far along this environment is with respect to migrations. If the environment doesn't contain a migrationLog, one will be created from scratch.
Note: This script should be part of your CI pipeline
Here is the developer workflow for making changes to Contentful Types:
migration/contentTypes
migrate-auto
yarn migrate-auto
script takes a diff between the Contentful type typeId
(from the environment specified in envId
) and the contentTypes
folder, and creates a timestamped migration file in the migrations
folder. In the case where automatic change detection is not possible, you would have to run yarn migrate-manual
fill in the migration file yourself.yarn migrate-auto
script also generates migrations for the editor interfaces. Unlike the JSON for the types, the JSON for editor interfaces is not stored together with the code, and will be propagated only once thru staging and master, at which point, master becomes the authoritative truth on editor interfaces.yarn migrate-manual --id=<typeId>
script: creates a file with a timestamped file name and boilerplate content for the type typeId
. For migration API syntax see: https://github.com/contentful/migration-cli#reference-documentation.
Rename field example (change field Id and then field name):myType.editField(‘header’).changeFieldId(‘header’, ‘title’).name(‘Title’);
At the end, what should be checked into source control is the change to the data model in contentTypes
and the corresponding migration(s) in the folder migrations
In order to apply migrations from the migrations
folder to a Contentful space, the following script is used. This is currently part of the release process, but might be useful for testing purposes:
The yarn migrate-apply --space-id=<spaceId> --management-token=<token>
Folder structure (within the project that's using this package)
folder | what it does |
---|---|
contentTypes | contains the authoritative version of the content types for this project |
incomingTypes | temporary folder containing the JSON for the content types downloaded from Contentful, and is used for diffs against the JSON in contentTypes to generate delta migrations, when possible |
migrations | contains migration scripts to be applied on target environments |
FAQs
migration scripts
The npm package @dfds-contentful/migration receives a total of 3 weekly downloads. As such, @dfds-contentful/migration popularity was classified as not popular.
We found that @dfds-contentful/migration demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.