
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
bunsen-tools
Advanced tools
Note: In order to use bunsen-tools you will need to have Node 5.x installed, with NPM 3.x.
Once you have Node installed you can run the following command to install bunsen-tools:
npm install -g bunsen-tools
Below is a list of the possible commands you can use with the bunsen-tools CLI. This usage information can also be obtained by running the following command:
bunsen --help
or by running the shorthand:
bunsen -h
Note: Both view and model files provided to the following commands must be in JSON format.
To convert old view formats to the latest view schema (UI Schema 2), simply run the following command:
bunsen convert <legacyViewFile>
You may also use the shorthand command:
bunsen c <legacyViewFile>
In order to validate a Bunsen model or view simply run the following command:
bunsen validate <modelOrViewFile>
You may also use the shorthand command:
bunsen v <modelOrViewFile>
You can also validate a view against a model by running:
bunsen validate <viewFile> <modelFile>
To get the current version of bunsen-tools simply run:
bunsen --version
or the shorthand:
bunsen -V
FAQs
convert ui-schema to ui-schema-2
The npm package bunsen-tools receives a total of 3 weekly downloads. As such, bunsen-tools popularity was classified as not popular.
We found that bunsen-tools demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.