
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@go1/apim-cli
Advanced tools
Generate the required files to deploy your service to an APIM instance. Just create the OpenApi doc and the CLI will take care of the rest.
First of all, make sure you have node v20
or higher installed. Then install the CLI and run the initialise command with:
npm i @go1/apim-cli -g
@go1/apim-cli init
You can alternatively use npx to install and initialise together
npx @go1/apim-cli init
This will kick off a wizard asking a few configuration questions including where to find the openapi.yml file. Afer the wizard has successfully finished, you should see a new folder called apim
with all the required files for your service inside.
You're ready to push those files with your next commit and let the CI/CD pipeline handle the rest for you.
You can find more information about APIM here [Add link here]
init
CLI command for creating a new apim directory
@go1/apim-cli init [OPTION]
Option | Description | Type | Default | Required? |
---|---|---|---|---|
openapi | Pass the openapi.yml file, this will try to use configuration from the swagger doc to populate the wizard | string | null | No |
name | Pass the display name of your service | string | null | No |
path | Pass the public path for your service | string | null | No |
backend | Pass the internal path for your service | string | null | No |
update
CLI command for updating an existing apim directory so that you don't need to input the wizard again
@go1/apim-cli update
validate
CLI command for validating an open api doc follows the standard schema, you can also optionally pass a --master flag to validate against a source api to check if any breaking changes have been added. Input OpenAPI files can be either JSON or YAML format. There is also a --skip flag to still show breaking changes but don't throw an error in the console.
@go1/apim-cli validate <openapi.yml> [OPTION]
@go1/apim-cli validate openapi.yml --master=source.json --skip=true
Option | Description | Type | Default | Required? |
---|---|---|---|---|
openapi | Pass the incoming openapi.yml file that you want to validate | string | null | Yes |
master | Pass the source openapi.yml file to compare the incoming changes with | string | null | No |
skip | Whether you want to skip any breaking changes from throwing an error | boolean | false | No |
merge
CLI command for merging two openapi docs into a single file. This is useful for merging individual services into a master open api doc.
@go1/apim-cli merge changes.yml source.yml output.json
Clone this repo and run the following commands to setup and test locally
npm install
npm run build
chmod +x ./build
./build/cli.js init
npm run test
Go1 APIM CLI
is free and open-source software licensed under the Apache 2.0 License.
FAQs
Generate APIM deployment files from your openapi doc
The npm package @go1/apim-cli receives a total of 21 weekly downloads. As such, @go1/apim-cli popularity was classified as not popular.
We found that @go1/apim-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.