Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@redocly/cli
Advanced tools
@redocly/cli is a command-line tool for working with OpenAPI definitions. It provides a suite of tools to lint, bundle, and preview OpenAPI definitions, making it easier to maintain and document APIs.
Linting
Linting helps ensure that your OpenAPI definitions adhere to best practices and standards. The command checks the OpenAPI file for errors and warnings.
redocly lint openapi.yaml
Bundling
Bundling combines multiple OpenAPI files into a single file. This is useful for managing large APIs with multiple components. The command takes an input file and outputs a bundled file.
redocly bundle openapi.yaml -o bundled.yaml
Previewing
Previewing allows you to see how your OpenAPI documentation will look. The command starts a local server to preview the documentation in a web browser.
redocly preview-docs openapi.yaml
swagger-cli is a command-line tool for Swagger and OpenAPI. It provides similar functionalities like bundling and validating OpenAPI definitions. However, it lacks some of the advanced linting and preview features provided by @redocly/cli.
speccy is a command-line tool for linting, bundling, and transforming OpenAPI specifications. It offers similar linting and bundling capabilities but does not provide a preview feature like @redocly/cli.
Redocly CLI toolbox with rich validation and bundling features.
Currently, @redocly/cli supports these features:
Unlike other OpenAPI linters, @redocly/cli
defines the possible type tree of a valid OpenAPI definition and then traverses it. This approach is very similar to how linters for programming languages work and results in major performance benefits over other approaches. Extend functionality at different points in the lifecycle with preprocessors, rules, and decorators.
npx @redocly/cli lint path-to-root-file.yaml
Thanks to graphql-js and eslint for inspiration of the definition traversal approach and to Swagger, Spectral, and OAS-Kit for inspiring the ruleset.
FAQs
[@Redocly](https://redocly.com) CLI is your all-in-one OpenAPI utility. It builds, manages, improves, and quality-checks your OpenAPI descriptions, all of which comes in handy for various phases of the API Lifecycle. Create your own rulesets to make API g
The npm package @redocly/cli receives a total of 500,841 weekly downloads. As such, @redocly/cli popularity was classified as popular.
We found that @redocly/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.