Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
parse-github-payload
Advanced tools
Parses a github push event payload adding a list of files added, modified and removed to the payload
Parses a github push event payload adding a list of files added, modified and removed to the payload
parsePayload(payload, [options], [options.matchName], [options.ignoreCommit])
Parses a Github webhook payload returning a clone of the payload with additional useful properties.
Right now it only does anything with the push
event
adding a property _files
with arrays of files that have been added,
modified and removed by the push event.
If you want to act on added or modified files that are present in the most
recent commit. A single push event might include commits that add then
delete a file. In this case that file would not be included in
_files.added
. This is most useful for webhooks that act on files added or
modified in push events.
parameter | type | description |
---|---|---|
payload | Object | Github webhook payload |
[options] | Object | optional: |
[options.matchName] | Regex | optional: only return files that match this regex. |
[options.ignoreCommit] | Regex | optional: ignore files submitted with a commit message that matches this regex - useful for avoiding circular webhooks |
Returns parsedPayload
, a new parsedPayload with the _files
property.
_files.modified
Array of files in push event commits, with duplicates
removed and any files that were removed in a later commit also removed.
_files.removed
Array of files removed from the repo in the commits in the
push event, duplicates removed.
_files.added
Array of files added to and modified in the repo, with
duplicates removed and any files that were removed in a later commit also
removed.
_files.added_and_modified
array of files that have been added and
modified in the commits in a push event, excluding files that were added or
modified and subsequently deleted.
Requires nodejs.
$ npm install parse-github-payload
$ npm test
FAQs
Parses a github push event payload adding a list of files added, modified and removed to the payload
We found that parse-github-payload demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.