Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
io.extendreality.malimbe
Advanced tools
A collection of tools to simplify writing public API components in Unity.
Malimbe
A collection of tools to simplify writing public API components in Unity.
Malimbe is a collection of tools to simplify writing public API components in Unity.
By taking the assemblies that are created by build tools and changing the assembly itself, repetetive boilerplate can be reduced, new functionality can be introduced and logic written as part of the source code can be altered. This process is called Intermediate Language (IL) weaving and Malimbe uses Fody to do it.
Malimbe helps running Fody and Fody addins without MSBuild or Visual Studio and additionally offers running them inside Unity by integrating with Unity's compilation and build pipeline. Multiple weavers come with Malimbe to help with boilerplate one has to write when creating Unity components that are intended for public consumption. This includes a form of "serialized properties", getting rid of duplicated documentation through XML documentation and the [Tooltip]
attribute as well as weavers that help with ensuring the API is able to be called from UnityEvent
s and more.
Branch | Version | Explanation |
---|---|---|
latest | Stable, production-ready | |
next | Experimental, not production-ready |
Releases follow the Semantic Versioning (SemVer) system.
Please follow these steps to install the package using a local location until Unity's Package Manager (UPM) allows third parties to publish packages to the UPM feed:
Download a release from the Releases page and extract it into your folder you use to keep your packages. It is recommended to make that folder part of your project and therefore version controlled.
Open your Unity (>= 2018.3
) project and follow Unity's instructions on how to add the package to your project using UPM.
Anywhere in your Unity project add a FodyWeavers.xml
file.
Configure the various weavers Malimbe offers, e.g.:
<?xml version="1.0" encoding="utf-8"?>
<Weavers>
<Malimbe.FodyRunner>
<LogLevel>Error, Warning</LogLevel>
</Malimbe.FodyRunner>
<Malimbe.MemberClearanceMethod/>
<Malimbe.PropertySerializationAttribute/>
<Malimbe.PropertySetterMethod/>
<Malimbe.PropertyValidationMethod/>
<Malimbe.XmlDocumentationAttribute IdentifierReplacementFormat="`{0}`"/>
</Weavers>
As with any Fody weaver configuration the order of weavers is important in case a weaver should be applying to the previous weaver's changes.
In case there are multiple configuration files all of them will be used. In that scenario, if multiple configuration files specify settings for the same weaver, a weaver will be configured using the values in the last configuration file found. A warning is logged to notify of this behavior and to allow fixing potential issues that may arise by ensuring only a single configuration exists for any used weaver.
Additional weavers are supported. To allow Malimbe's Unity integration to find the weavers' assemblies they have to be included anywhere in the Unity project or in one of the UPM packages the project uses.
Malimbe is a collection of tools. Each project represents a solution to a specific issue.
FodyRunner
A standalone library that allows running Fody without MSBuild or Visual Studio.
LogLevel
to specify which log messages should be sent to the logger instance. Separate multiple levels by using multiple XML elements or separate inside an XML element by using any form of whitespace including newlines or commas. Valid values are
None
(or don't specify LogLevel
)Debug
Info
Warning
Error
All
FodyRunner.UnityIntegration
Weaves assemblies using FodyRunner
in the Unity Editor after Unity compiled them.
Tools/Malimbe/Weave All Assemblies
allows to manually trigger the weaving process for all assemblies in the current project. This is useful when a FodyWeavers.xml
file was changed.MemberClearanceMethod.Fody
A generic weaver. Creates ClearMemberName()
methods for any member MemberName
that is of reference type. Sets the member to null
in this method.
[Cleared]
to use this. Both properties and fields are supported. Properties need a setter.ClearMemberName
the method name's prefix can be customized with the XML attribute MethodNamePrefix
, e.g.:
<Malimbe.MemberClearanceMethod MethodNamePrefix="Nullify" />
This will create methods named NullifyMemberName
.PropertySerializationAttribute.Fody
A Unity-specific weaver. Ensures the backing field for a property is serialized.
[Serialized]
to use this. The property needs both a getter and setter.[SerializeField]
it will be added.public int Counter { get; set; }
will use a backing field called counter
.protected bool isValid { get; private set; }
will use a backing field called IsValid
.PropertySetterMethod.Fody
A generic weaver. Calls a validation method at the start of a property's setter.
[SetsProperty(nameof(SomeProperty))]
to use this. The method needs to follow the signature pattern T MethodName(T, T)
where T
is the property's type. The accessibility level of the method doesn't matter and the name lookup is case insensitive. A call to this method will be added to the start of the property's setter.PropertyValidationMethod.Fody
A generic weaver (though made for Unity). Creates a OnValidate()
method that validates a property.
[Validated]
to use this. The property needs both a getter and setter.OnValidate
the method name can be customized with the XML attribute MethodName
, e.g.:
<Malimbe.PropertyValidationMethod MethodName="Validate" />
XmlDocumentationAttribute.Fody
A generic weaver (though made for Unity). Looks up the XML <summary>
documentation for a field and adds [Tooltip]
to that field with that summary.
[DocumentedByXml]
to use this.TooltipAttribute
the added attribute can be customized with the XML attribute FullAttributeName
, e.g.:
<Malimbe.XmlDocumentationAttribute FullAttributeName="Some.Other.Namespace.DocumentationAttribute" />
The attribute needs to have a constructor that takes a string
parameter and nothing else. Note that the attribute name has to be the full type name, i.e. prefixed by the namespace.<see cref="Something"/>
will be replaced by just the "identifier" Something
by default. To customize this behavior the XML attribute IdentifierReplacementFormat
can be used, e.g.:
<Malimbe.XmlDocumentationAttribute IdentifierReplacementFormat="`{0}`" />
The format needs to specify a placeholder {0}
, otherwise an error will be logged and the default replacement format will be used instead.UnityPackaging
Outputs a ready-to-use folder with the appropriate hierarchy to copy into a Unity project's Assets folder. The output includes both the Unity integration libraries as well as all weavers and their attributes listed above.
If you want to raise a bug report or feature request please follow SUPPORT.md.
While we intend to add more features to Malimbe when we identify a need or use case, we're always open to take contributions! Please follow the contribution guidelines found in CONTRIBUTING.md.
Inspired by Fody's naming the name "Malimbe" comes from the small birds that belong to the weaver family Ploceidae.
Malimbe is released under the MIT License.
Third-party notices can be found in THIRD_PARTY_NOTICES.md
FAQs
A collection of tools to simplify writing public API components in Unity.
The npm package io.extendreality.malimbe receives a total of 38 weekly downloads. As such, io.extendreality.malimbe popularity was classified as not popular.
We found that io.extendreality.malimbe demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.