
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
dsh-api-contract
Advanced tools
接口契约助手:解析 OpenAPI 3.x(JSON/YAML),生成 TypeScript / Python 类型化客户端,并检测接口升级的破坏性变更
解析 OpenAPI 3.x(JSON 或 YAML),生成 TypeScript / Python 类型化客户端,并检测两个规范版本之间的破坏性变更。纯 Node 实现,无网络、无外部服务。
| 工具 | 作用 |
|---|---|
gen_client | 解析规范,生成类型化客户端(TS 基于 fetch / Python 基于 requests) |
diff_spec | 对比旧版/新版规范,列出破坏性变更与非破坏性变更 |
dsh plugin add dsh-api-contract
安装后在 profile 的 package.json 的 dsh.profile.bundles 中加入 "dsh-api-contract"。
根据 openapi.yaml 生成一个 TypeScript 客户端
→ 调用 gen_client(spec="openapi.yaml", lang="typescript", outDir="./src/api")
升级接口前看看有没有破坏性变更
→ 调用 diff_spec(oldSpec="openapi.v1.json", newSpec="openapi.v2.json")
$ref、内联 []/{}、字面量块 |)。requests(pip install requests)。FAQs
接口契约助手:解析 OpenAPI 3.x(JSON/YAML),生成 TypeScript / Python 类型化客户端,并检测接口升级的破坏性变更
The npm package dsh-api-contract receives a total of 13 weekly downloads. As such, dsh-api-contract popularity was classified as not popular.
We found that dsh-api-contract demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.