Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
empty-schema
Advanced tools
:crystal_ball: Generate empty placeholder data from JSON Schemas
Generating random data is useful for testing (try out hazy if you have this need), but developers often require empty placeholder data to work with, particularly when developing web forms.
The empty data that empty-schema
generates conforms to the following:
npm install --save empty-schema
import {empty} from 'empty-schema'
const schema = {
type: 'object',
properties: {
foo: {
type: 'integer',
minimum: 12,
multipleOf: 5
},
bar: {
type: 'array',
items: { type: 'integer' },
minItems: 3
},
baz: {
type: 'string',
minLength: 5
}
},
required: [ 'foo', 'bar', 'baz' ]
}
console.log(empty(schema))
// {
// foo: 15,
// bar: [ 0, 0, 0 ],
// baz: ''
// }
string: because it impossible to guess what the string
content should be, even when patterns and length limits are given,
a string schema always results in the empty string: ''
.
integer: empty-schema
tries to satisfy the minimum
, maximum
and multipleOf
constraints whenever possible wth the additional property
that, when it is possible, 0
is returned.
number: just follows the integer
schema.
object: tries to create a minimal object with as few keys as possible.
Only keys that are in the required
array are generated.
Object size is ignored completely, for the same reason that the strings are empty: we cannot guess the keys.
array: when the item
type is given, and minItems
is given,
the shortest array that matches this is generated. It also works
when items
is a tuple. maxItems
is ignored. Whenever possible,
the empty array is returned.
boolean: always results in false
.
null: always results in null
.
oneOf, anyOf: selects one of the accepted types and goes from there.
allOf: empty-schema
merges all schemas and works from that schema
to generate a value.
enum: selects the first possible value.
$ref
: just works!
Whenever specified, empty-schema
uses the default
value (even if it
does not match the schema).
This code is licensed under the ISC License
FAQs
Generate empty placeholder data from JSON Schemas
The npm package empty-schema receives a total of 4,886 weekly downloads. As such, empty-schema popularity was classified as popular.
We found that empty-schema demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.