Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
@lanetix/formula-fields-parser
Advanced tools
Parses OData with LX aliases and generates query string options.
This repository contains the WIP Formula Fields Parser. Currently implemented:
Parser
- The formula fields parservisit
- The formula fields AST Visitorerrors
- Built in errors for use with the
visitorvalidate
- The formula fields semantic analysiswithPostProcessors
- A function to add post-processors to the parse and
validate logic, similar to redux middleware. See the detailed explanation
for more informationdefault
The default export is a convenience function that takes the text of a formula, parses it, and runs semantic validation. It takes the following parameters:
formulaText
- The formula textoptions
- An object containing options for parsing. Note that this object
is also passed to all post-processors, so it can
contain additional options if needed.
parseOptions
- An object containing the options to give to the parserrecordType
- The type schema for the record this formula is bound to. If
provided, it will be used during validation to ensure all fields referenced in
the formula exist on the given type.optimizations
- An object containing flags turning optimizations on or off
constantFold
- Turns off constant folding
if set to falseIt returns an object with the following properties:
ast
- The formula abstract syntax tree. This may
be undefined if there are errors during the lexing or parsing phases.errors
- An array of any lex,
parse, or semantic
errors that occurred when validating the formula.All errors are guaranteed to have the following properties, although some may have additional:
name
- The name of the error type (e.g. MismatchedTokenException)message
- The error messagelocation
- The location where the error occurredimport parse from '@lanetix/formula-fields-parser'
// fields *are not* validated
const { ast, errors } = parse('CONCAT($first_name, $last_name)')
// fields are validated
const recordType = ... // get from records service if not available
const { ast, errors } = parse('CONCAT($first_name, $last_name)', { recordType })
// Turn off constant folding
const { ast, errors } = parse('CONCAT("Hello ", "World")', { optimizations: { constantFold: false } })
// Only parse string literals
import parse, { Parser } from '@lanetix/formula-fields-parser'
const { ast, errors } = parse('"Hello World"', { parseOptions: { rule: Parser.stringLiteral } })
withPostProcessors
In addition to the normal parse -> optimize -> validate pipeline provided by the default export, additional post processors can be specified. Post- processors are extremely similar to Redux middleware, and it is advised to be familiar with such before continuing.
Post processors have the following signature:
next => (parseResult, options) => { /* Implementation Logic */ }
next
- The next post processor in the chain. If not called, the post-
processing chain will be aborted here. It must be called with parseResult
and options
, although the implementation logic is free to modify both objects
parseResult
- The parse result. Additional
properties may be added, but ast
and errors
must always conform to the
parse result standard format
options
- The options object given. If none are given, this
will be an empty object, rather than undefined
.
withPostProcessors
ExamplesLogs out the ast when the logAst
option is set to true
import { withPostProcessors } from '@lanetix/formula-fields-parser'
const logAst = next => (parseResult, options) => {
if (options.logAst) {
console.log(parseResult.ast)
}
return next(parseResult, options)
}
const parse = withPostProcessors(logAst)
// ast is *not* logged by the logAst post-processor, because no options are given
const { ast, errors } = parse('CONCAT("Hello ", $name)')
// ast is logged by the logAst post-processor
const { ast, errors } = parse('CONCAT("Hello ", $name)', { logAst: true })
// can be combined with built in options
const options = {
logAst: true,
optimizations: {
constantFold: false
}
}
const { ast, errors } = parse('CONCAT("Hello ", "World")', options)
Conditionally return either the ast or the errors
import { withPostProcessors } from '@lanetix/formula-fields-parser'
// Note that next is not called, so this *must* be the last argument to
// withPostProcessors. If it isn't, post-processors after it will be completely
// ignored.
const astOrError = next => (parseResult, options) => {
if (parseResult.errors.length > 0) {
return errors
} else {
return parseResult.ast
}
}
const parse = withPostProcessors(astOrError)
// Result is an ast
const result = parse('CONCAT("Hello ", $name)')
// Result is an array of errors
const result = parse('CONCAT(')
FAQs
Parses the lanetix formula DSL.
We found that @lanetix/formula-fields-parser demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.