Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@ui5/migration
Advanced tools
Tooling to support the migration of UI5 projects by adapting code for new UI5 framework versions
Tooling to support the migration of UI5 projects by adapting code for new UI5 framework versions.
Note: This project is currently in beta. While there are ongoing improvements and round-offs being applied, we see the early release as a great opportunity to collect feedback from the community to further advance the UI5 migration tooling.
The UI5 migration tool is node.js-based and performs source code replacements and optimizations, reducing or getting rid of deprecated API. It builds upon a powerful parsing of JavaScript sources into an AST (abstract syntax tree) in order to perform the actual code replacements. Migration typically consists of an analysis part and a code modification part.
IMPORTANT: The modified source code needs to be manually reviewed and thoroughly tested. There is no 100% guarantee that the modified code works as expected.
For more details on how-to migrate your project's codebase, please consult additional information such as the migration guide
The migration tool is currently available for early usage. It can be installed with npm.
npm install --global @ui5/migration
To verify that the installation worked, run:
ui5-migration --help
Execute migration for the current folder:
ui5-migration migrate
Please see command-line interface for more details.
A list of currently available migration tasks can be found here
A list of options to configure the formatting of migration output can be found here
Please check our Contribution Guidelines. Your input and support is welcome!
Please follow our Contribution Guidelines on how to report an issue.
FAQs
Tooling to support the migration of UI5 projects by adapting code for new UI5 framework versions
The npm package @ui5/migration receives a total of 0 weekly downloads. As such, @ui5/migration popularity was classified as not popular.
We found that @ui5/migration demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.