
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
ecqm-bundler
Advanced tools
CLI for bundling CQL files as an eCQM FHIR Bundle.
The CLI can be globally installed through npm:
npm install -g ecqm-bundler
Must have an instance of the cql-translation-service running somewhere.
ecqm-bundler -c /path/to/main/cql/file.cql --deps /path/to/dep1.cql /path/to/dep2.cql -v /path/to/valueset/directory
ecqm-bundler -c /path/to/main/cql/file.cql --deps-directory /path/to/deps/directory -v /path/to/valueset/directory
Current Measure resource customizations include the Measure Improvement Notation and the Measure Scoring Code:
ecqm-bundler -c /path/to/main/cql/file.cql --deps-directory /path/to/deps/directory -v /path/to/valueset/directory --scoring-code "proportion" --improvement-notation "negative"
By default, the bundler will look in the directory specified by -v/--valueset
for any JSON files that have a url
property which matches what is included by any pieces of the CQL logic.
You can disable this behavior with the --no-valuesets
option, but note that the resulting eCQM FHIR Bundle may not yield proper calculation results due to lack of ValueSet resources:
ecqm-bundler -c /path/to/main/cql/file.cql --deps-directory /path/to/deps/directory --no-valuesets
The bundler will add population group criteria to the Measure resource, which references specific CQL expressions that identify
the relevant eCQM population. By default, it uses "Numerator", "Denominator", and "Initial Population" as the expression definition names. These can be customized with the -n/--numer, -d/--denom, -i/--ipop
options respectively:
ecqm-bundler -c /path/to/main/cql/file.cql --deps-directory /path/to/deps/directory -v /path/to/valueset/directory -n "numer def" -d "denom def" -i "ipop def"
By default, the bundler just uses an example.com
URL as the base canonical URL for the resources (e.g. http://example.com/Measure/measure-123
). This can be customized using the --canonical-base
option:
ecqm-bundler -c /path/to/main/cql/file.cql --deps-directory /path/to/deps/directory -v /path/to/valueset/directory --canonical-base "http://example.com/other/canonical/base"
Usage: ecqm-bundler [options]
Options:
-c, --cql-file <path>
--deps <deps...> List of CQL dependency files of the main file (default: [])
--deps-directory <path> Directory containing all dependent CQL files
-n,--numer <expr> Numerator expression name of measure (default: "Numerator")
-i,--ipop <expr> Numerator expression name of measure (default: "Initial Population")
-d,--denom <expr> Denominator expression name of measure (default: "Denominator")
-o, --out <path> Path to output file (default: "./measure-bundle.json")
-v, --valuesets <path> Path to directory containing necessary valueset resource
--no-valuesets Disable valueset detection and bundling
-u, --translator-url <url> URL of cql translation service to use (default: "http://localhost:8080/cql/translator")
--canonical-base <url> Base URL to use for the canonical URLs of library and measure resources (default: "http://example.com")
-i, --improvement-notation <notation> Measure's improvement notation (choices: "positive", "negative", default: "positive")
-s, --scoring-code <scoring> Measure's scoring code (choices: "proportion", "ratio", "continuous-variable", "cohort", default: "proportion")
-h, --help display help for command
FAQs
CLI for bundling FHIR-based eCQMs
The npm package ecqm-bundler receives a total of 10 weekly downloads. As such, ecqm-bundler popularity was classified as not popular.
We found that ecqm-bundler demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.