🚨 Shai-Hulud Strikes Again:834 Packages Compromised.Technical Analysis
Socket
Book a DemoInstallSign in
Socket

@ubio/protocol

Package Overview
Dependencies
Maintainers
13
Versions
140
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@ubio/protocol

ubio Automation Protocol

latest
npmnpm
Version
7.10.1
Version published
Maintainers
13
Created
Source

ubio Automation Protocol

Terminology

Domain is a collection of input, output and type definitions. Domains are uniquely identified by id which is a PascalCase string. Example: FlightBooking.

Definition is a JSON Schema object, uniquely identified by id, which consists of domain id and definition key, separated with dot. Example: Generic.Price.

Definitions also have $id attribute which is a fragment identifier used to uniquely reference definitions in JSON Schema validation. Example: #Generic.Price.

Quick Start

To make changes to protocol src/schema/ files need to be updated and schema.json regenerated.

Since current codebase may be not compatible with the recent version of nodejs, you may need docker-compose.yml to test changes locally.

Additionally, protocol URL is hardcoded and points to production environment, thus you may need to temporary override it to see changes on http://localhost:8080/. Edit site/provider.js but DO NOT commit it to GH repo with your other changes:

export const provider = new ProtocolProvider({
    url: 'http://localhost:8080/schema.json', // ! \\
    autoRefresh: true,
    ttl: 60000
});

Build ./public static files:

$ docker-compose run build

Run nginx and open browser to test it:

$ docker-compose up nginx -d
$ open 'http://localhost:8080/'

Shut down and cleanup when done:

$ docker-compose down

Don't forget to revert site/provider.js:

$ git checkout site/provider.js

Good luck!

FAQs

Package last updated on 19 Jun 2025

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts