
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Immersion is a command-line (CLI) tool built for the Content Direct product catalog system.
Node.js is required in order to run Immersion. Please ensure you have Node.js installed: http://nodejs.org/.
Immersion helps in ingesting categories, media, people, playlists, and products by pulling data from a CSV file.
npm install -g immersion
Running immersion -h
will display the help menu which indicates a successful install.
The CSV file that is ingested should have a header row followed by the rows of entity (i.e. Category, Media, Person, Playlist, Product) information. Each row below the header is equivalent to one entity that will be created or updated.
Each column in the header should map to an object in the specified request. For example, when creating products the headers should follow the CreateProduct request format:
Product.Id.Type,Product.Id.Value,Product.Name,Product.References[0].Type,Product.References[0].Value
Objects are referenced using dot notation while arrays use brackets.
{Entity}.Id.Value is required.
Use your sandbox credentials to view the core request formats: https://documentation.doc1.cdops.net/v5.7/Interface.aspx?interface=Catalog.
A logs folder is created in the current working directory when immersion is run. Sub-folders are created for each entity id. The sub-folders will contain a request.json file and a response.json file for every create or update API call.
immersion -f examples/person.csv create Person
Creates person objects in sandbox.
immersion -e stg1 -f examples/media.csv create Media
Creates media objects in staging.
immersion -f examples/product.csv update Product
Updates product objects in sandbox.
ISC???
FAQs
Content Direct product catalog command line tool
The npm package immersion receives a total of 1 weekly downloads. As such, immersion popularity was classified as not popular.
We found that immersion demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.