
Security News
arXiv Is Rate Limiting Authors Following a Flood of AI Slop Submissions
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.
@forge/manifest
Advanced tools
Package used to parse and validate the
manifest.ymlfile of Forge apps.
Use it as follows:
import { ProcessorBuilder, ValidationTypes } from '@forge/manifest';
const results = ProcessorBuilder.instance()
.withValidation(ValidationTypes.FULL)
.build()
.process();
console.log(`Valid manifest ? ${results.success}`);
For validating trigger event scopes, use the simple validation API that only requires the event name and scopes:
import { validateTriggerScopes } from '@forge/manifest';
// Simple: just pass event and scopes
const result = await validateTriggerScopes(
'avi:jira:assigned:issue',
['read:jira-work']
);
if (!result.valid) {
console.error(`Missing scopes: ${result.missingScopes.join(', ')}`);
}
This is useful for:
In case of an invalid manifest.yml, the following information will be populated:
export interface ValidationError {
message: string;
reference: string;
level: 'error' | 'warning';
line?: number;
column?: number;
}
export interface ManifestValidationResult {
success: boolean;
errors?: ValidationError[];
}
The schemas in this package are automatically updated from Shipyard daily. Any manual changes to these files will be reverted. Please raise a PR in app-host-artifacts instead.
FAQs
Definitions and validations of the Forge manifest
The npm package @forge/manifest receives a total of 140,419 weekly downloads. As such, @forge/manifest popularity was classified as popular.
We found that @forge/manifest demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

Research
/Security News
A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.