
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
crossref-utils
Advanced tools
Utilities for creating crossref.org deposit metadata from node or the command line.
To use from the command line, use the -g to create a global install.
npm install -g crossref-utils
To create a deposit, from within a MyST project, run:
crossref deposit --type <type> -o <output>.xml
This will prompt the user to select new DOIs, if they are not present in MyST metadata. Available options are:
--type: Currently available types are journal, preprint, conference, and dataset. Each type is discussed in more detail below.-o, --output: Output xml file. If this is not provided, the xml will be printed to stdout.--file: Specific file to use for the deposit; this may be a single article or a myst.yml file. If not specified, the CLI will prompt the user.--prefix: DOI prefix to use for new, generated DOIs. Default is Curvenote's prefix.--name, --email: Depositor name and email. Default Depositor is Curvenote.--registrant: Registrant organization. Default is Crossref - likely this should not be changed.--id: Unique ID for the deposit. By default, a random ID will be autogenerated - likely this should not be changed.Crossref supports multiple deposit types; currently crossref-utils supports the following four. For each of these, supported article metadata pulled from MyST frontmatter include:
titlesubtitledoidate - used as publication datelicense - only the URL is usedfunding - MyST funding information is reduced to only award numbers and sourcesfirst_page/last_pageAdditionally, the following information will be pulled from the MyST project:
abstractcitations - only citations with DOIs are includedDifferent deposit types have different required fields. If DOIs are not provided, the user will be prompted to select new DOIs. If other required fields are not provided, the user will receive an error message.
This type is used to register a new journal and/or new journal articles. If --file is set to myst.yml, this deposit type will attempt to discover multiple articles in the MyST project.
In addition to the above article metadata for each article, this deposit type requires journal title and DOI, set under venue frontmatter in myst.yml:
venue.title - journal titlevenue.doi - journal DOIYou may also specify in the frontmatter:
venue.short_title - journal abbreviationvolume.numberissue.numberissue.doiThis type is used to register a conference proceedings. Similar to "journal" deposits, this will attempt to discover multiple articles.
In addition to the above article metadata for each article, this deposit type requires conference title, proceedings title, and proceedings publisher, set in myst.yml:
venue.title - conference titlevolume.title - proceedings titlevenue.publisher - proceedings publisherYou may also specify in the frontmatter:
venue.short_title - conference acronymvenue.number - conference numbervenue.date - conference datevenue.location - conference locationvenue.series - series titlevenue.issn - series issnvenue.doi - series doivolume.subject - proceedings subjecteditors - proceedings editorsThis type is used to register a database deposit. For this type, each "article" is considered a dataset, where "article frontmatter" is used as dataset frontmatter.
In addition to the individual dataset metadata, this deposit type requires a database title, set under venue frontmatter in myst.yml:
venue.title - database titleYou may also specify in the frontmatter:
editors - database contributors (independent from the individual dataset authors)venue.doi - a related item that each dataset is part of.This type is used to register any posted content - these are standalone articles not associated with a journal or conference. You cannot register multiple articles with this type. Also, there is no additional metadata required than the article metadata described above.
To validate an existing deposit XML file against the schema:
crossref validate <deposit>.xml
This package is ESM only.
Made with love by
Continuous Science Foundation
FAQs
Utilities for depositing crossref metadata
The npm package crossref-utils receives a total of 0 weekly downloads. As such, crossref-utils popularity was classified as not popular.
We found that crossref-utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.