
Security News
pnpm 11.5 Adds Support for Recognizing npm Staged Publishes
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.
@greguintow/apollo-reporting-protobuf
Advanced tools
apollo-reporting-protobufNote: The Apollo usage reporting API is subject to change. We strongly encourage developers to contact Apollo support at
support@apollographql.comto discuss their use case prior to building their own reporting agent using this module.
This module provides JavaScript/TypeScript
Protocol buffer definitions
for the Apollo usage reporting API. These definitions are generated for
consumption from the reports.proto file which is defined internally within
Apollo.
Note: Due to a dependency on Unix tools (e.g.
bash,grep, etc.), the development of this module requires a Unix system. There is no reason why this can't be avoided, the time just hasn't been taken to make those changes. We'd happily accept a PR which makes the appropriate changes!
Currently, this package generates a majority of its code with
@apollo/protobufjs (a fork of
protobufjs that we maintain
specifically for this package) based on the reports.proto file. The output is
generated with the generate npm script.
The root of the repository provides some devDependencies necessary to build
these definitions qand the prepare npm script is invoked programmatically via
the monorepo tooling (e.g. Lerna) thanks to this module's postinstall
script. Therefore, when making changes to this module, run scripts via npx lerna run SCRIPTNAME in the root of this monorepo in order to update the
definitions in this module.
To update reports.proto to the current version recognized by the Studio usage
reporting ingress, run lerna run update-proto. To then regenerate the JS and
TS files, run npx lerna run generate. We check in the generated code and only
regenerate it manually, partially to make builds faster (no need to run pbjs on
every npm install) and partially so that we don't have to make sure that
pbjs runs on every Node version that we support.
FAQs
Protobuf format for Apollo usage reporting
We found that @greguintow/apollo-reporting-protobuf demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.