
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
mdn-confluence
Advanced tools
User support tool for maintaining MDN compatibility data using Web API Confluence data.
These tools are intended for MDN Compat Data curators to leverage Web API Confluence data.
First, run:
npm install
This will prepare an environment for the CLI.
The CLI is meant for generating JSON files to produce candidate PRs for mdn/browser-compat-data. It can be run using:
node main/generate.es6.js [options/flags]
or
npm run generate -- [options/flags]
Passing no [options/flags]
will use the latest online Confluence data to
patch interfaces that already exist in node_modules/browser-compat-data
and
output them to data/browser-compat-data
. The resulting files follow the
same directory structure as the browser-compat-data
repository. To see
documentation for all [options/flags]
, pass the --help
flag.
The easiest way to prepare a PR is to obtain a clone of
mdn/browser-compat-data
, ensure that both the clone and the copy in
node_modules
are up to date, and send the output of the generate script to
your clone of mdn/browser-compat-data
.
Here's a recipe for preparing a PR for the fictional Foo
and Bar
interfaces, already documented in mdn/browser-compat-data
:
git clone https://github.com/mdn/browser-compat-data.git /path/to/mdn/browser-compat-data
cd /path/to/mdn/browser-compat-data
git checkout -b my-pr-branch
cd /path/to/mdittmer/mdn-confluence
npm update
npm run generate -- --interfaces=Foo,Bar --output-dir=/path/to/mdn/browser-compat-data
cd /path/to/mdn/browser-compat-data
git diff
If the diff is empty, then Confluence and MDN agree on browser versioning
information for Foo
and Bar
. If not, you can make any manual adjustments,
commit and the change, and submit a pull request.
If you've got a great idea to make this better, please feel free to file issues and/or submit pull requests.
FAQs
User support tool for maintaining MDN compatibility data using Web API Confluence data.
The npm package mdn-confluence receives a total of 3 weekly downloads. As such, mdn-confluence popularity was classified as not popular.
We found that mdn-confluence demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.