Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@ds-sfplugin/sf-party
Advanced tools
Splits metadata XML into YAM parts and combines YAML parts into XML
This repository provides a template for creating a plugin for the Salesforce CLI. To convert this template to a working plugin:
Please get in touch with the Platform CLI team. We want to help you develop your plugin.
Generate your plugin:
sf plugins install dev
sf dev generate plugin
git init -b main
git add . && git commit -m "chore: initial commit"
Create your plugin's repo in the salesforcecli github org
When you're ready, replace the contents of this README with the information you want.
sf
pluginsSalesforce CLI plugins are based on the oclif plugin framework. Read the plugin developer guide to learn about Salesforce CLI plugin development.
This repository contains a lot of additional scripts and tools to help with general Salesforce node development and enforce coding standards. You should familiarize yourself with some of the node developer packages used by Salesforce.
Additionally, there are some additional tests that the Salesforce CLI will enforce if this plugin is ever bundled with the CLI. These test are included by default under the posttest
script and it is required to keep these tests active in your plugin if you plan to have it bundled.
For cross clouds commands, e.g. sf env list
, we utilize oclif hooks to get the relevant information from installed plugins.
This plugin includes sample hooks in the src/hooks directory. You'll just need to add the appropriate logic. You can also delete any of the hooks if they aren't required for your plugin.
This plugin is bundled with the Salesforce CLI. For more information on the CLI, read the getting started guide.
We always recommend using the latest version of these commands bundled with the CLI, however, you can install a specific version or tag if needed.
sf plugins install @ds-sfplugin/sf-party@x.y.z
Please report any issues at https://github.com/forcedotcom/cli/issues
External contributors will be required to sign a Contributor's License Agreement. You can do so by going to https://cla.salesforce.com/sign-cla.
To build the plugin locally, make sure to have yarn installed and run the following commands:
# Clone the repository
git clone git@github.com:salesforcecli/@ds-sfplugin/sf-party
# Install the dependencies and compile
yarn && yarn build
To use your plugin, run using the local ./bin/dev
or ./bin/dev.cmd
file.
# Run using local run file.
./bin/dev hello world
There should be no differences when running via the Salesforce CLI or using the local run file. However, it can be useful to link the plugin to do some additional testing or run your commands from anywhere on your machine.
# Link your plugin to the sf cli
sf plugins link .
# To verify
sf plugins
sf party combine
Summary of a command.
USAGE
$ sf party combine [--json] [-n <value>]
FLAGS
-n, --name=<value> Description of a flag.
GLOBAL FLAGS
--json Format output as json.
DESCRIPTION
Summary of a command.
Description of a command.
EXAMPLES
$ sf party combine
sf party hello world
Summary of a command.
USAGE
$ sf party hello world [--json] [-n <value>]
FLAGS
-n, --name=<value> Description of a flag.
GLOBAL FLAGS
--json Format output as json.
DESCRIPTION
Summary of a command.
Description of a command.
EXAMPLES
$ sf party hello world
sf party split
Summary of a command.
USAGE
$ sf party split [--json] [-n <value>]
FLAGS
-n, --name=<value> Description of a flag.
GLOBAL FLAGS
--json Format output as json.
DESCRIPTION
Summary of a command.
Description of a command.
EXAMPLES
$ sf party split
FAQs
Splits metadata XML into YAM parts and combines YAML parts into XML
We found that @ds-sfplugin/sf-party demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.