
Security News
pnpm 11.5 Adds Support for Recognizing npm Staged Publishes
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.
mtgatool-shared
Advanced tools
This tool generate TypeScript definitions for your Protocol Buffers models, when you use the excellent ProtoBuf.js library.
Original tool doesn't seem supported anymore.
Also, the build process was a mess. I fixed those. But I don't even send a PR, because I changed a lot of stuff.
npm install proto2typescript -g
# Parse and convert the proto file to json using pbjs (from ProtoBuf.js)
pbjs model.proto > model.json
# Convert the model to TypeScript definitions
proto2typescript --file model.json > model.d.ts
Options:
-f, --file The JSON file [required]
-c, --camelCaseGetSet Generate getter and setters in camel case notation [default: true]
-u, --underscoreGetSet Generate getter and setters in underscore notation [default: false]
-p, --properties Generate properties [default: true]
See https://github.com/aliok/websocket-protobufs-ts-experiments for Gulp integration.
Because intelligent code completion is cool :-)

It is a Node.js project. The sourcecode is written in TypeScript, but the JavaScript output is present in the repository.
If you want to run the tests, you need bash, mocha and typescript.
npm install mocha -g
npm install typescript -g
In order to run tests:
./runTests.sh
This code is developed in context of the BRIDGE project.
The source code of this tool is licenced under the MIT License.
FAQs
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.