
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
netlify-plugin-stepzen
Advanced tools
Netlify Build plugin - This plugin will deploy a stepzen API endpoint on every netlify build.
Deploy a StepZen GraphQL API with any Netlify build.
StepZen enables you easily integrate APIs and data for Jamstack sites by making it easy to build a GraphQL API that gets the data you need from REST, databases or any backend. After you've built a GraphQL API to power a site's static assets or dynamic experiences, the StepZen plugin enables you to easily integrate the API in a Netlify build. No change is required to the Netlify deployment process. Your endpoint runs on StepZen, as a service, so that you don't manage any infrastructure.
npm install -g stepzen
The first step is to install this plugin into your Netlify Site. You have two options.
stepzen
in the Netlify plugins
directory, and click the install button.Second, you configure the plugin.
stepzen
directory containing your API specification. If you have
built an API using StepZen, you can just copy the directory into your Netlify
project root folder and name it stepzen
.STEPZEN_ACCOUNT
specifies the name of your StepZen account;STEPZEN_ADMIN_KEY
specifies the admin API Key that enables access to that
account's endpoint.STEPZEN_NAME
specifies a name that StepZen will to use for the resources
related to this project.STEPZEN_FOLDER
is a folder within StepZen for project resources in (this
defaults to netlify
)STEPZEN_CONFIGURATION_SETS
is a list of StepZen configurationsets to apply
to your schema definitions. This is specified as a comma separated string,
and defaults to netlify/configuration,stepzen/defaults
.When you push changes to the main
branch on GitHub (for cases where source
is stored in GitHub), GitHub calls a Netlify hook. (It works the same way if
your source materials are in gitlab
, or bitbucket
.)
The hook triggers a checkout, build, and push on Netlify and results in the updated website served by the Netlify CDN.
The build first establishes the build environment specified in the
netlify.toml
file, but before triggering the build process, it triggers
the StepZen plugin.
The build plugin compiles, and pushes the contents of the GraphQL schema
files (SDLs) contained in the stepzen
directory to the corresponding
StepZen account.
The site build process begins. Because the site build process is triggered after the StepZen plugin, StepZen APIs are available during the static build.
Netlify completes the build and pushes the site to the Netlify CDN. Once the push completes successfully, the StepZen endpoint includes the updated GraphQL schema (SDL) code and is serving the new API.
StepZen enables you build a GraphQL API that gets the data you need from REST, databases or any backend. You don't need to be a GraphQL expert, build a GraphQL server, or understand resolvers. At runtime, StepZen ensures that API keys and queries are protected when making calls from a browser to retrieve and render data on the client-side. You don't need to write code to parallelize execution, store keys safely, handle caching, and more.
The Netlify integration simplifies your deployment. The workflow you use to deploy changes on Netlify does not change. You manage your GraphQL schemas (SDLs) in a cohesive way with the rest of the Netlify site and your releases are coordinated.
FAQs
Netlify Build plugin - This plugin will deploy a stepzen API endpoint on every netlify build.
The npm package netlify-plugin-stepzen receives a total of 6 weekly downloads. As such, netlify-plugin-stepzen popularity was classified as not popular.
We found that netlify-plugin-stepzen demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.