Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@kintone/plugin-manifest-validator
Advanced tools
[![npm version](https://badge.fury.io/js/%40kintone%2Fplugin-manifest-validator.svg)](https://badge.fury.io/js/%40kintone%2Fplugin-manifest-validator) ![Node.js version](https://img.shields.io/badge/dynamic/json.svg?url=https://raw.githubusercontent.com/k
Validate manifest.json
of kintone plugin. Used in @kintone/plugin-packer.
$ npm install @kintone/plugin-manifest-validator
const validator = require("@kintone/plugin-manifest-validator");
const manifestJson = require("./path/to/your/manifest.json");
const result = validator(manifestJson);
console.log(result.valid); // true or false
console.log(result.errors); // array of ajv error objects
console.log(result.warnings); // string array
ajv error objects is like:
{
dataPath: '/version',
keyword: 'type',
message: 'should be integer',
params: {
type: 'integer',
},
schemaPath: '#/properties/version/type',
}
manifest-schema.json
JSON schema for manifest.json is available.
const manifestJsonSchema = require("@kintone/plugin-manifest-validator/manifest-schema.json");
manifest-schema.d.ts
TypeScript type definition (d.ts) for manifest.json is available.
import { KintonePluginManifestJson } from "@kintone/plugin-manifest-validator/manifest-schema";
let manifest: KintonePluginManifestJson;
$schema
propertyWhen you are configuring your project, you would better set the $schema property. This property should point to a schema file that validates your manifest. We recommend setting the $schema property to the following URI in your manifest.json:
https://raw.githubusercontent.com/kintone/js-sdk/%40kintone/plugin-manifest-validator%4010.2.0/packages/plugin-manifest-validator/manifest-schema.json
Note: Add or update the $schema property at the top of the manifest.json.
MIT License
FAQs
[![npm version](https://badge.fury.io/js/%40kintone%2Fplugin-manifest-validator.svg)](https://badge.fury.io/js/%40kintone%2Fplugin-manifest-validator) ![Node.js version](https://img.shields.io/badge/dynamic/json.svg?url=https://raw.githubusercontent.com/k
We found that @kintone/plugin-manifest-validator demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.