
Research
/Security News
DuckDB npm Account Compromised in Continuing Supply Chain Attack
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
parse-github-payload
Advanced tools
Parses a github push event payload adding a list of files added, modified and removed to the payload
Parses a github push event payload adding a list of files added, modified and removed to the payload
parsePayload(payload, [options], [options.matchName], [options.ignoreCommit])
Parses a Github webhook payload returning a clone of the payload with additional useful properties.
Right now it only does anything with the push
event
adding a property _files
with arrays of files that have been added,
modified and removed by the push event.
If you want to act on added or modified files that are present in the most
recent commit. A single push event might include commits that add then
delete a file. In this case that file would not be included in
_files.added
. This is most useful for webhooks that act on files added or
modified in push events.
parameter | type | description |
---|---|---|
payload | Object | Github webhook payload |
[options] | Object | optional: |
[options.matchName] | Regex | optional: only return files that match this regex. |
[options.ignoreCommit] | Regex | optional: ignore files submitted with a commit message that matches this regex - useful for avoiding circular webhooks |
Returns parsedPayload
, a new parsedPayload with the _files
property.
_files.modified
Array of files in push event commits, with duplicates
removed and any files that were removed in a later commit also removed.
_files.removed
Array of files removed from the repo in the commits in the
push event, duplicates removed.
_files.added
Array of files added to and modified in the repo, with
duplicates removed and any files that were removed in a later commit also
removed.
_files.added_and_modified
array of files that have been added and
modified in the commits in a push event, excluding files that were added or
modified and subsequently deleted.
Requires nodejs.
$ npm install parse-github-payload
$ npm test
FAQs
Parses a github push event payload adding a list of files added, modified and removed to the payload
We found that parse-github-payload demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.
Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.