Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
app.json
is a manifest format for describing web apps. It's a file in the root
directory of an app that describes the app's build requirements, environment variables, addons,
and other information.
This repository contains the source for an npm module called app.json, which has many facets:
Download the module from npm and save it to your package.json:
npm install app.json --save
Require it in your script:
var App = require("app.json")
If browserify isn't your thing, use the pre-compiled browser-ready bundle in
dist/app.js. Include this file in your html page and it will create
window.App
for you.
To use this module on the command line, you'll need to install it globally using npm:
npm install app.json --global
Now you can run app
or app.json
from any directory:
$ app
Usage: app [options] [command]
Commands:
schema [options] Write the app.json schema to STDOUT
Options:
-h, --help output usage information
-V, --version output the version number
Use 'app <command> --help' to get more information about a specific command.
The app.json schema is defined using the JSON Schema specification and is validated with the revalidator node module. View the raw schema or the auto-generated app.json Schema Documentation on Heroku Dev Center.
Instantiate with a JSON filename:
var app = App.new(__dirname + "/path/to/app.json")
Instantiate with a JSON string:
var json = "{name: \"small-sharp-tool\", description: \"This app does one little thing, and does it well.\"}"
var app = App.new(json)
Instantiate with a JavaScript object:
var app = App.new({
name: "small-sharp-tool",
description: "This app does one little thing, and does it well."
})
You can fetch app manifests straight from GitHub. The
github-raw-cors-proxy service is used
to make the app.json
file downloadable from browsers.
url
can be a fully qualified GitHub URL, or a shorthand user/repo
string:
App.fetch('zeke/harp-slideshow-template', function(err, manifest) {
console.log(err, manifest)
})
Generates an example manifest from example content in the schema.
App.example
A getter method that validates the app manifest and returns true
or false
Returns null
if app manifest is valid.
Returns an array of error objects if invalid:
[
{property: "name", message: "is required"},
{property: "website", message: "is not a valid url"}
]
Return a pretty JSON string representation of the manifest, without any superfluous properties.
Fetch pricing data about the app's required addons by hitting the Heroku Platform API.
npm install
npm test
To prepare a browser-ready bundle, run the following:
npm run build
# Wrote dist/app.js
# Wrote dist/app.min.js
Genarate human-friendly docs from the schema
npm run docs
# Wrote dist/schema.md
# Wrote dist/schema.html
MIT
FAQs
Create, validate, and render Heroku app.json manifests
The npm package app.json receives a total of 7 weekly downloads. As such, app.json popularity was classified as not popular.
We found that app.json demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.