
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
avro-schema-parser
Advanced tools
Flatten AVRO schema's which reference other schema's, so the Kafka schema registry will accept them.
Flatten AVRO schema's which reference other schema's, so the Kafka schema registry will accept them.
The Kafka schema registry only supports schema files with one schema at the root, even though the AVRO specifications allows you to specify multiple schema's in one JSON file. This makes sense, since otherwise you would need to specify the specific schema in the multi-schema file that you are going to use to encode/decode messages. However, in case you already have a multi-schema file, this utility will try to inline your schema's.
The first time it encounters a reference to another schema, it will inline it, the next time it will reference it.
To test if your schema is valid, you can use the official avro-tools from the releases website.
cls && java -jar avro-tools-1.8.2.jar compile schema driver.eu.alert.avsc tmp
This package was tested by running the tool on the data/cap.avsc
schema, and posting the resulting json schema file to the Confluence schema-registry using another small utility, postj, which you can install via npm i -g postj
. Please note that the Landoop schema-registry-ui v0.9.3 may say that the schema is invalid, as is the case here, while posting it will still work.
Several cases have not been tested, and will probably not work:
FAQs
Flatten AVRO schema's which reference other schema's, so the Kafka schema registry will accept them.
The npm package avro-schema-parser receives a total of 9 weekly downloads. As such, avro-schema-parser popularity was classified as not popular.
We found that avro-schema-parser demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.