
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
click-parser
Advanced tools
Extract data from Ubuntu's click packages
npm install --save click-parser
npm install -g click-parser
var parse = require('click-parser');
parse('//path/to/click', function(err, data) {
if (err) {
console.error(err);
}
else {
console.log(data);
/*
{
apps: Array of detailed app objects
{
name: String of the internal name of this app
type: String of the apps type (app, webapp, scope, push)
features: Array of String of the app's special features (content_hub, url_dispatcher, push_helper, account_service)
desktop: Object of the app's desktop file (if one exists) (the keys are lowercase)
scopeIni: Object of the scope's ini file (if one exists) (the keys are lowercase)
apparmor: Object of the app's apparmor file
contentHub: Object of the app's content hub file (if it exists)
pushHelper: Object of the app's push helper file (translated from xml) (if it exists)
accountApplication: Object of the app's account application file (translated from xml) (if it exists)
accountService: Object of the app's account service file (translated from xml) (if it exists)
urlDispatcher: Array of the app's url dispatcher file (if it exists)
webappProperties: Object of the app's webapp properties (if it exists)
webappInject: Boolean, whether or not the webapp is injecting a js script (only applicable to type == 'webapp')
hooks: Object of the hooks for this app listed in the click's manifest
}
architecture: String of the package's architecture (all, armhf, i386, amd64, arm64)
description: String of the package's description
framework: String of the click's framework (ex: ubuntu-sdk-15.04)
icon: Path to the icon file (if the second argument to parse() is true)
maintainer: The maintainers full name
maintainerEmail: The maintainer's email address
name: String name of the package
permissions: Array of Strings of all the permissions of all the apps
title: String title of the package
types: Array of Strings of the types of all the apps
urls: Array of Strings of the urls handled by all the apps
version: String of the package's version
}
*/
}
});
//Also extract the icon into /tmp
parse('/path/to/click/file.click', true, function(err, data) {});
click-parser /path/to/click
Copyright (C) 2019 Brian Douglass
This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License version 3, as published by the Free Software Foundation.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranties of MERCHANTABILITY, SATISFACTORY QUALITY, or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/.
FAQs
Extract data from Ubuntu's click packages
The npm package click-parser receives a total of 9 weekly downloads. As such, click-parser popularity was classified as not popular.
We found that click-parser demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.