
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
@ecollect/redoc
Advanced tools
This is README for 2.0 version of ReDoc (React based). README for 1.x version is on the branch v1.x

discriminator) 


x-tagGroups vendor extensioncreate-react-app (sample)theme optionImportant: all the 2.x releases are deployed to npm and can be used via jsdeliver:
v2.0.0-alpha.15: https://cdn.jsdelivr.net/npm/redoc@2.0.0-alpha.17/bundles/redoc.standalone.jsnext release: https://cdn.jsdelivr.net/npm/redoc@next/bundles/redoc.standalone.jsAdditionally, all the 1.x releases are hosted on our GitHub Pages-based CDN:
v1.2.0: https://rebilly.github.io/ReDoc/releases/v1.2.0/redoc.min.jsv1.x.x release: https://rebilly.github.io/ReDoc/releases/v1.x.x/redoc.min.jslatest release: https://rebilly.github.io/ReDoc/releases/latest/redoc.min.js - it will point to latest 1.x.x release since 2.x releases are not hosted on this CDN but on unpkg.| ReDoc Release | OpenAPI Specification |
|---|---|
| 2.0.0-alpha.x | 3.0, 2.0 |
| 1.19.x | 2.0 |
| 1.18.x | 2.0 |
| 1.17.x | 2.0 |
<!DOCTYPE html>
<html>
<head>
<title>ReDoc</title>
<!-- needed for adaptive design -->
<meta charset="utf-8"/>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link href="https://fonts.googleapis.com/css?family=Montserrat:300,400,700|Roboto:300,400,700" rel="stylesheet">
<!--
ReDoc doesn't change outer page styles
-->
<style>
body {
margin: 0;
padding: 0;
}
</style>
</head>
<body>
<redoc spec-url='http://petstore.swagger.io/v2/swagger.json'></redoc>
<script src="https://cdn.jsdelivr.net/npm/redoc@next/bundles/redoc.standalone.js"> </script>
</body>
</html>
That's all folks!
IMPORTANT NOTE: if you work with untrusted user spec, use untrusted-spec option to prevent XSS security risks.
Install using yarn:
yarn add redoc
or using npm:
npm install redoc --save
For CDN:
<script src="https://cdn.jsdelivr.net/npm/redoc/bundles/redoc.standalone.js"> </script>
For npm:
<script src="node_modules/redoc/bundles/redoc.standalone.js"> </script>
<redoc> element to your page<redoc spec-url="url/to/your/spec"></redoc>
Import RedocStandalone component from 'redoc' module:
import { RedocStandalone } from 'redoc';
and use it somewhere in your component:
<RedocStandalone specUrl="url/to/your/spec"/>
or
<RedocStandalone spec={/* spec as an object */}/>
Also you can pass options:
<RedocStandalone
specUrl="http://rebilly.github.io/RebillyAPI/swagger.json"
options={{
nativeScrollbars: true,
theme: { colors: { main: '#dd5522' } },
}}
/>
Here are detailed options docs.
You can also specify onLoaded callback which will be called each time Redoc has been fully rendered or when error occurs (with an error as the first argument). NOTE: It may be called multiply times if you change component properties
<RedocStandalone
specUrl="http://rebilly.github.io/RebillyAPI/swagger.json"
onLoaded={error => {
if (!error) {
console.log('Yay!');
}
}}
/>
You can inject Security Definitions widget into any place of your specification description. Check out details here.
ReDoc makes use of the following vendor extensions:
x-logo - is used to specify API logox-traitTag - useful for handling out common things like Pagination, Rate-Limits, etcx-code-samples - specify operation code samplesx-examples - specify JSON example for requestsx-nullable - mark schema param as a nullablex-displayName - specify human-friendly names for the menu categoriesx-tagGroups - group tags by categories in the side menux-servers - ability to specify different servers for API (backported from OpenAPI 3.0)x-ignoredHeaderParameters - ability to specify header parameter names to ignore<redoc> options objectYou can use all of the following options with standalone version on tag by kebab-casing them, e.g. scrollYOffset becomes scroll-y-offset and expandResponses becomes expand-responses.
untrustedSpec - if set, the spec is considered untrusted and all HTML/markdown is sanitized to prevent XSS. Disabled by default for performance reasons. Enable this option if you work with untrusted user data!scrollYOffset - If set, specifies a vertical scroll-offset. This is often useful when there are fixed positioned elements at the top of the page, such as navbars, headers etc;
scrollYOffset can be specified in various ways:
suppressWarnings - if set, warnings are not rendered at the top of documentation (they still are logged to the console).lazyRendering - Not implemented yet hideHostname - if set, the protocol and hostname is not shown in the operation definition.expandResponses - specify which responses to expand by default by response codes. Values should be passed as comma-separated list without spaces e.g. expandResponses="200,201". Special value "all" expands all responses by default. Be careful: this option can slow-down documentation rendering time.requiredPropsFirst - show required properties first ordered in the same order as in required array.noAutoAuth - do not inject Authentication section automaticallypathInMiddlePanel - show path link and HTTP verb in the middle panel instead of the right onehideLoading - do not show loading animation. Useful for small docsnativeScrollbars - use native scrollbar for sidemenu instead of perfect-scroll (scrolling performance optimization for big specs)hideDownloadButton - do not show "Download" spec button. THIS DOESN'T MAKE YOUR SPEC PRIVATE, it just hides the button.disableSearch - disable search indexing and search boxtheme - ReDoc theme. Not documented yet. For details check source code: theme.tsInstead of adding spec-url attribute to the <redoc> element you can initialize ReDoc via globally exposed Redoc object:
Redoc.init(specOrSpecUrl, options, element, callback?)
specOrSpecUrl is either JSON object with specification or an URL to the spec in JSON or YAML formatoptions options objectelement DOM element to put ReDoc intocallback (optional) - callback to be called after Redoc has been fully rendered. It is also called also on errors with error as the first argumentRedoc.init('http://petstore.swagger.io/v2/swagger.json', {
scrollYOffset: 50
}, document.getElementById('redoc-container'))
see CONTRIBUTING.md
FAQs
ReDoc
The npm package @ecollect/redoc receives a total of 11 weekly downloads. As such, @ecollect/redoc popularity was classified as not popular.
We found that @ecollect/redoc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.