Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
@openfn/deploy
Advanced tools
A module providing facilities to interactively deploy projects and workflows to instances of OpenFn Lightning.
Given a project configuration file, a config file and optionally a state file, this module will:
import { readFile } from 'node:fs/promises';
import deploy from '@openfn/deploy';
const extraOptions = {};
await deploy(
{
project: await readFile('project.json', 'utf8'),
config: await readFile('config.json', 'utf8'),
state: await readFile('state.json', 'utf8'),
},
extraOptions
);
See the test
folder for more usage examples.
The runtime provides no CLI. Use packages/cli (devtools) for this.
The deployment endpoints are configurable.
In all cases, you will need to provide an API token in order to identify yourself to the API.
The ability to set which endpoint you want to deploy to is useful for testing environments, but also for deploying to a local instance of OpenFn Lightning.
State files are used to keep a reference between the keys used in the project files and the IDs of the remote objects.
In addition the file is used to keep track of the last deployed version of the project. This allows the deployment to be checked for differences between the local and remote versions.
To build a js package into dist/
, run:
$ pnpm build
To watch and re-build whenever the js changes, run
$ pnpm build:watch
Note: The watch throws an error on first run but seems to work.
You can test or watch tests with:
$ pnpm test
$ pnpm test:watch
FAQs
Deploy projects to Lightning instances
The npm package @openfn/deploy receives a total of 561 weekly downloads. As such, @openfn/deploy popularity was classified as not popular.
We found that @openfn/deploy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.