
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
hs-remote-managers
Advanced tools
Generates REST client libraries based on OpenAPI-compatible specifications.
Generates REST client libraries based on OpenAPI-compatible specifications.
Clients are generated using the OpenAPI Generator. Whatever it supports is what we can support. If you run into issues, check the documentation for the generator before reaching out. This github repository just stores scripts to manage the different clients and provide a convention for making new clients.
You will need Java and Node installed. If you're publishing to a repository, you'll need whatever tool is necessary to publish it there.
Make sure it doesn't exist already. If it does, don't make another one.
If the service you want to make a client for lis not listed in the configs
folder, make a new folder for your service. It should just be the name of
the service.
In the folder for your service, create a file named {{generator}}.yml
. This
will be the config file that is passed to the OpenAPI Generator to generate your
client. Each generator has its own configuration options, most of which have
examples here.
If you're unsure what options are available, check the link and look for your
generator.
Conventions to follow:
- `outputDir` should be `artifacts/{{service}}/{{generator}}`
- `npmName` should be `@headspace/openapi-{{service}}-{{generator}}-sdk`
These conventions are just to make things predictable.
supply a single config as an argument to the generator script,
e.g. yarn build sleep-content/typescript-axios.yml
to generate
only that file.
Optional run yarn build
which will scan through the configs
and batch generate all the artifacts.
artifacts/{service}/{generator}/
and run npm install
"publishConfig": {
"registry": "https://npmjs.com/registry"
}
yarn publish --otp={npm code from authenticator app}
For the most part, just commit everything.
THIS IS A MANUAL PROCESS. YOU ARE RESPONSIBLE FOR PUBLISHING. CIRCLE_CI WILL NOT DO ANYTHING FOR YOU.
artifacts
folder.{languageCode}-{regionCode}
e.g. en-US
.
As a result, we can see the locale in the field names of a request payload and response. Unfortunately, Open API Generator doesn't support hyphen in the field names, it transforms en-US
to en_US
. We need to replace en_US
to en-US
back once a service SDK is generated to avoid the contract mismatching.FAQs
Generates REST client libraries based on OpenAPI-compatible specifications.
The npm package hs-remote-managers receives a total of 0 weekly downloads. As such, hs-remote-managers popularity was classified as not popular.
We found that hs-remote-managers demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.