
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
apps is a node module for creating and validating Heroku app.json files. It works in node.js and the browser, and also has a CLI.
The app.json schema is defined using the JSON Schema specification and is validated with the awesome revalidator node module.
See the schema at schema.js.
Download the module from npm and save it to your package.json:
npm install apps --save
Require it in your script:
var App = require("apps")
If browserify isn't your thing, use the pre-compiled browser-ready bundle in
dist/app.js. Include this file in your html page and it will create
window.App for you.
To use this module on the command line, you'll need to install it globally using npm:
npm install apps --global
Now you can run app or apps from any directory:
$ app
Usage: app [options] [command]
Commands:
schema [options] Write the app.json schema to STDOUT
Options:
-h, --help output usage information
-V, --version output the version number
Use 'app <command> --help' to get more information about a specific command.
Instantiate with a JSON filename:
var app = App.new(__dirname + "/path/to/app.json")
Instantiate with a JSON string:
var json = "{name: \"small-sharp-tool\", description: \"This app does one little thing, and does it well.\"}"
var app = App.new(json)
Instantiate with a JavaScript object:
var app = App.new({
name: "small-sharp-tool",
description: "This app does one little thing, and does it well."
})
You can fetch app manifests straight from GitHub. The
github-raw-cors-proxy service is used
to make the app.json file downloadable from browsers.
url can be a fully qualified GitHub URL, or a shorthand user/repo string:
App.fetch('zeke/harp-slideshow-template', function(err, manifest) {
console.log(err, manifest)
})
Generates an example manifest from example content in the schema.
App.example
A getter method that validates the app manifest and returns true or false
Returns null if app manifest is valid.
Returns an array of error objects if invalid:
[
{property: "name", message: "is required"},
{property: "website", message: "is not a valid url"}
]
Return a pretty JSON string representation of the manifest, without any superfluous properties.
Fetch pricing data about the app's required addons by hitting the Heroku Platform API.
npm install
npm test
To prepare a browser-ready bundle, run the following:
npm run build
# Wrote dist/app.js
# Wrote dist/app.min.js
Genarate human-friendly docs from the schema
npm run docs
# Wrote dist/schema.md
# Wrote dist/schema.html
MIT
FAQs
Create, validate, and render Heroku app.json manifests
The npm package apps receives a total of 43 weekly downloads. As such, apps popularity was classified as not popular.
We found that apps demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.