
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
leancloud-auto
Advanced tools
Automatically generate LeanCloud classes and docs from schema definition.
Automatically generate LeanCloud classes and docs from schema definition.
Which make it easy to migrate to LeanCloud from other data source.
# use yarn
$ yarn global add leancloud-auto
# or use npm
$ npm install -g leancloud-auto
There are something that to be explained firstly, the following docs use the keywords Schema and Class, which are both referred to LeanCloud Class. It is called Class in cloud, while called Schema at local.
leanauto init -i appId -k appKey -m masterKey ./schema.json
This command will first create some classes which defined in file schema.json. Then compare the generated schema with the local schema and tell you whether they are perfectly matched.
Feel free to use this command, it would not delete your original schema or data. But you should make sure that the same schema not exists when runing this command, otherwise your original schema would be dirted.
# from cloud schema
leanauto doc -i appId -k appKey -m masterKey -o ./structure.html
# from local schema
leanauto doc ./schema.json -o ./structure.html
This command will generate documents of the specified schema, representing as HTML tables. Open it in browser then have a look.
If not specify the -o option, it will print the markdown style string in terminal instead of writing to a HTML file.
GraphQL language schemaleanauto graphql ./schema.json -d ./graphql
This command will generate some files named {{className}}.js, which could simply integrate with GraphQL by another tool egg-graphql.
See test/test.js.
FAQs
Automatically generate LeanCloud classes and docs from schema definition.
We found that leancloud-auto demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.