
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@mparticle/mp-config-json-schema
Advanced tools
Provides a JSON Schema for validating an mp.config.json file
npm install @mparticle/mp-config-json-schema
Add import mpConfigSchema from '@mparticle/mp-config-json-schema'; to the top of any file
where mp.config.json is meant to be read.
Pass mpConfigSchema into your validator to validate your config file.
As an example, mp-config-json-schema can be used with AJV.
import Ajv from 'ajv';
import mpConfigSchema from '@mparticle/mp-config-json-schema';
const ajv = new Ajv();
const configObject = {
global: {
workspaceId: '1234',
clientId: 'my_secret_id',
clientSecret: 'SUPERSECRETKEY',
},
planningConfig: {
dataPlanId: 'alex_demo_data_plan',
dataPlanVersionFile: '.mp/data_plans/alex_demo_data_plan-v1.json',
versionNumber: 2,
},
};
const valid = ajv.validate(mpConfigSchema, configObject);
if (!valid) {
console.error(ajv.errorsText());
}
Copyright 2019 mParticle, Inc.
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
FAQs
JSON Schema for mp.config.json
The npm package @mparticle/mp-config-json-schema receives a total of 32 weekly downloads. As such, @mparticle/mp-config-json-schema popularity was classified as not popular.
We found that @mparticle/mp-config-json-schema demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.