
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
@hubspot/project-parsing-lib
Advanced tools
Parsing library for converting projects directory structures to their intermediate representation
This project is a translation layer that can be used to translate a project to its immediate representation prior to being uploaded to the project v2 service.
sequenceDiagram
autonumber
actor dev as External Developer
participant cli as HS CLI
participant ppl as Project Parsing Library
participant pv3 as Projects v3
dev ->> cli: Developer runs `hs project upload`
cli ->> cli: Loads project config
cli ->> ppl: CLI calls `translate` function with the values required from the project config
ppl ->> ppl: Walks the project directory looking for the hsmeta files
loop For each hsmeta file
ppl ->> ppl: Checks if file is valid JSON
ppl ->> ppl: Checks if the file is in a valid location
ppl ->> ppl: Generates the IR
end
ppl ->> pv3: Fetch the schemas used to validate the generated IR
loop For each hsmeta file
ppl ->> ppl: Validate the IR config block against the schema
end
alt Validation successful for all schemas
ppl ->> cli: Pass the IR back to the CLI
cli ->> cli: Zip the project contents
cli ->> pv3: Upload the project and the IR
else Validation failed for 1+ schema(s)
ppl ->> cli: Log the error and exit the upload
end
FAQs
Parsing library for converting projects directory structures to their intermediate representation
The npm package @hubspot/project-parsing-lib receives a total of 6,362 weekly downloads. As such, @hubspot/project-parsing-lib popularity was classified as popular.
We found that @hubspot/project-parsing-lib demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 32 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.