Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
astro-decap-collection
Advanced tools
Derive Astro content collection schemata from Decap collection configs.
The procedure is to transform a Decap config into a Zod schema by mapping the Decap widget fields with custom transformers.
A demo application using the transforms to convert in the browser can be found here.
npm i -D astro-decap-collection
# or
pnpm add -D astro-decap-collection
# or
yarn add -D astro-decap-collection
This module can either be used as a CLI tool or as a programmatic library.
cli | programmatic |
---|---|
1. Run cli tool to generate the zod schema | 1. Load or import your Decap config file manually |
2. Load the generated schema in the Astro collection config | 2. Transform Decap config into zod schema |
3. Provide the zod schema at runtime in the Astro collection config |
Transform the Decap config at build time and use the generated Zod schema. This allows Astro to validate the given data and provides types as well.
This is the recommended way to use this module.
Option | Description |
---|---|
--config , -c | Path to the Decap YML config file, can be a glob pattern |
--target , -t | Path to the Astro content directory to write to |
--naming , -n | Naming pattern of the created file with placeholders |
--watch , -w | Watch the config file for changes |
The name of the target file will be config.<collection>.ts
by default, using the collection name from the Decap config.
This can be configured with the --naming
option placeholders.
Config paths can be provided as positionals, thus the
--config
flag is optional.
# astro-decap-collection, adc - Binary name
# --config, -c - Decap YML config file path to read from
# --target, -t - Astro content directory path to write to
# --watch, -w - Use watch mode
# full command:
astro-decap-collection --config ./public/admin/config.yml --target ./src/content --watch
# or with shorthands and positionals:
adc -t ./src/content -w ./public/admin/config.yml
# or with glob pattern:
adc -t ./src/content -w ./public/collections/*.yml
The cli command should be run at least before every
astro build
.
Then, the generated schema can be used in the Astro collection config.
import { defineCollection } from 'astro:content';
import { prepareSchema } from 'astro-decap-collection';
// grab generated schema
import { schema } from './config.blog.ts';
// define the collection
// https://docs.astro.build/en/guides/content-collections/#defining-collections
export const collections = {
blog: defineCollection(prepareSchema(schema)),
// ... or without the convenience wrapper
blog: defineCollection({ type: 'content', schema }),
};
The --naming
option can be used to define a naming pattern for the generated file.
For the time being, the following placeholders are supported:
%%name%%
- The name of the collection from the Decap configThis wont get you types, but you can still validate content against the schema.
import {
getCollection,
loadDecapConfig,
prepareSchema,
transformCollection,
} from 'astro-decap-collection';
import { defineCollection, z as zod } from 'astro:content';
import { fileURLToPath } from 'node:url';
// load Decap config and transform it at runtime
const configURL = fileURLToPath(new URL('../../public/admin/config.yml', import.meta.url));
const config = await loadDecapConfig(configURL);
const collection = getCollection(config, 'blog')!;
const schema = await transformCollection(collection, { zod });
export const collections = {
blog: defineCollection(prepareSchema(schema.runtime)),
};
Run a local tsx compiler in watch mode
npx -y tsx watch src/cli.ts -c public/examples/blog.yml -t tmp -w
FAQs
Derive Astro collection schemata from Decap configs.
The npm package astro-decap-collection receives a total of 9 weekly downloads. As such, astro-decap-collection popularity was classified as not popular.
We found that astro-decap-collection demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.