
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
apostrophe-a3-schema-exporter
Advanced tools
A command line task running in an A2 module that can "see" all of the schemas for all of the defined doc and widget types, their sub-array and object fields, et cetera.
The command to run in your A2 project will be:
node app apostrophe-a3-schema-exporter:export
Iterates over all of these and adds a schema.js
file in the A3 format in every custom module. You can change the parent folder name of modules by passing the option --folder
. By default, it is lib/modules
. Example:
node app apostrophe-a3-schema-exporter:export --folder="src/lib/modules"
Pay attention, the script will overwrite existing schema.js
files in your modules directories.
The directory structure would look like:
modules
custom-module
schema.js
custom-page
schema.js
custom-widget
schema.js
Inside each one the format would be:
module.exports = {
... a3 fields here
};
This makes it easy to pull into custom-module/index.js:
module.exports = {
extend: '@apostrophecms/piece-type', // or whatever type needed as '@apostrophecms/piece-page-type' for example
fields: require('./schema.js')
};
This greatly helps with A2 to A3 migration although manual review is required because it does not understand:
FAQs
A2 utility task to export schemas to A3 format
The npm package apostrophe-a3-schema-exporter receives a total of 1 weekly downloads. As such, apostrophe-a3-schema-exporter popularity was classified as not popular.
We found that apostrophe-a3-schema-exporter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.