
Security News
The Code You Didn't Write Is Still Yours to Defend
AI agents are pulling packages into environments no scanner is watching, creating exposure before security teams can see it.
@epilot/validators
Advanced tools
Shared input validators, regex patterns, and AJV schema keywords used across epilot Journey apps.
Shared input validators, regex patterns, and AJV schema keywords used across epilot Journey apps.
yarn add @epilot/validators
import {
functionalValidators,
regExpStatments,
schemaKeywords,
IBAN_Specifications
} from '@epilot/validators'
What each export provides:
| Export | Description |
|---|---|
functionalValidators | Callback-style validators: iban, birth_date, future_date_14. |
regExpStatments | Named regex patterns (email, name, German date, telephone, etc.). |
schemaKeywords | AJV-compatible custom JSON Schema keywords. |
IBAN_Specifications | Country specifications re-exported from the iban package. |
yarn install
yarn start # tsdx watch — rebuild on change
yarn build # tsdx build — produces dist/
yarn test # tsdx test
yarn lint # eslint
dist/ is gitignored. The prepack script rebuilds it automatically before any npm publish / npm pack, so a fresh checkout never needs a manual yarn build before releasing.
The CI does not publish this package. The publish job is disabled in .gitlab-ci.yml. Pushing a tag does not trigger a release. Version bumps and publishes happen manually from a developer's machine.
The @epilot npm organisation has 2FA on writes. An unattended GitLab runner can't supply an OTP, so CI publishes are blocked at the registry with a 403. Until a service-account-style token is configured at the npm-org level, publishing is a human step.
master with a clean working tree and an up-to-date pull.CHANGELOG.md, commit, tag, and push:
yarn release
This runs prerelease (lint + test), then standard-version, then postrelease (git push && git push --tags). It does not publish.@epilot/validators:
npm whoami # confirm the right user
npm login # only if needed
npm publish
prepack rebuilds dist/ from source.The tag exists but no version was published. Either:
npm publish from the tagged commit, oryarn release again (it will bump to the next patch) and publish that.npm doesn't allow republishing the same version, so if a publish half-completed, bump and republish.
FAQs
Shared input validators, regex patterns, and AJV schema keywords used across epilot Journey apps.
The npm package @epilot/validators receives a total of 2,007 weekly downloads. As such, @epilot/validators popularity was classified as popular.
We found that @epilot/validators demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 49 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
AI agents are pulling packages into environments no scanner is watching, creating exposure before security teams can see it.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.