
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
apn-app-manager
Advanced tools
apn-app-manager
is a command line tool that ingests an Appian application zip file, makes changes to the underlying XML files, and outputs a new Appian application zip file. It currently supports cloning an application.
When app building you may want to do things in bulk that are easiest to do via an application's exported XML files and a re-import. This tool helps to automate some of those tasks.
The functionality provided by this tool is not supported, nor endorsed by Appian. It is merely a community tool to manipulate XML files following strict rules. The structure of these XML files may change between Appian platform releases, and those changes may break this tool.
Importing an application export modified by this tool should be done at your own discretion.
Latest compatible Appian platform version tested against: 25.2.
npm i -g apn-app-manager
npm list -g
.apn
globally in your terminal.
npm config set prefix _
, where the _
is specific to your operating system. Here are helpful links to troubleshoot for Windows and Mac.apn
and follow the prompts to modify the application.Currently this tool only supports cloning applications, although more functionality may come in future releases.
Used to duplicate all objects of an application, which replaces the namespace of each object with a new namespace and generates unique UUIDs for each new object.
apn
in a folder containing your exported application zip.clone
for "What would you like to do?".SMP APP Artifacts
and SMP_APP_displayUser
would have a namespace of SMP_APP
/out/
folder./out/
folder after cloning:
objects.json
- This contains every attribute of collected metadata from every object in the package, including its current value and new value.not-cloned-uuids.json
- Warnings may appear during cloning about UUIDs in the package that the tool didn't know how to handle, which will be listed in this file. If no warnings appeared, this file will be empty. Generally these can be ignored if your inspection looks good, however these may be actual issues that come up due to XML structure changes in future Appian platform releases. Please reach out to the authors of this tool if you have any questions about this.namespaces.json
- This contains a mapping of old-to-new namespaces used when cloning.problem-terms.json
- Only output if problem terms were identified. This contains a mapping of problem words, where they were found, and what decision was made for them.composer/
- This directory contains a JSON file for each application which has "Composer/Requirements/Plan" of the requirementsCaptureB64
node in JSON format.Licensed under Apache 2.0
FAQs
Appian App Manager
The npm package apn-app-manager receives a total of 77 weekly downloads. As such, apn-app-manager popularity was classified as not popular.
We found that apn-app-manager demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.