
Security News
Crates.io Users Targeted by Phishing Emails
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
@hubspot/project-parsing-lib
Advanced tools
Parsing library for converting projects directory structures to their intermediate representation
This project is a translation layer that can be used to translate a project to its immediate representation prior to being uploaded to the project v2 service.
sequenceDiagram
autonumber
actor dev as External Developer
participant cli as HS CLI
participant ppl as Project Parsing Library
participant pv3 as Projects v3
dev ->> cli: Developer runs `hs project upload`
cli ->> cli: Loads project config
cli ->> ppl: CLI calls `translate` function with the values required from the project config
ppl ->> ppl: Walks the project directory looking for the hsmeta files
loop For each hsmeta file
ppl ->> ppl: Checks if file is valid JSON
ppl ->> ppl: Checks if the file is in a valid location
ppl ->> ppl: Generates the IR
end
ppl ->> pv3: Fetch the schemas used to validate the generated IR
loop For each hsmeta file
ppl ->> ppl: Validate the IR config block against the schema
end
alt Validation successful for all schemas
ppl ->> cli: Pass the IR back to the CLI
cli ->> cli: Zip the project contents
cli ->> pv3: Upload the project and the IR
else Validation failed for 1+ schema(s)
ppl ->> cli: Log the error and exit the upload
end
FAQs
Parsing library for converting projects directory structures to their intermediate representation
We found that @hubspot/project-parsing-lib demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 31 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
Product
Socket now lets you customize pull request alert headers, helping security teams share clear guidance right in PRs to speed reviews and reduce back-and-forth.
Product
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.