Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
postman2openapi
Advanced tools
Convert Postman collections to OpenAPI definitions.
Try it on the Web: https://kevinswiber.github.io/postman2openapi/
Archives of precompiled binaries for postman2openapi are available for Windows, macOS and Linux.
Linux binaries are static executables. Windows binaries are available either as built with MinGW (GNU) or with Microsoft Visual C++ (MSVC). When possible, prefer MSVC over GNU, but you'll need to have the Microsoft VC++ 2015 redistributable installed.
For Rust developers, installation is also available via Cargo. Installing Rust and Cargo
To install the latest published version on crates.io, use:
cargo install postman2openapi-cli
To install from the latest on GitHub, use:
cargo install --git https://github.com/kevinswiber/postman2openapi postman2openapi-cli
USAGE:
postman2openapi [OPTIONS] [input-file]
ARGS:
<input-file> The Postman collection to convert; data may also come from stdin
OPTIONS:
-f, --output-format <format> The output format [default: yaml] [possible values: yaml, json]
-h, --help Print help information
-V, --version Print version information
postman2openapi collection.json > openapi.yaml
cat collection.json | postman2openapi -f json
npm install postman2openapi
const collection = require("./collection"); // any Postman collection JSON file
const { transpile } = require("postman2openapi");
// Returns a JavaScript object representation of the OpenAPI definition.
const openapi = transpile(collection);
console.log(JSON.stringify(openapi, null, 2));
Note: A Dev Container is included for convenience.
To take advantage of build recipes, install just.
just build
Builds the Rust library and the CLI packages.
just test
Runs all lint checks (cargo fmt --check
, cargo clippy
) and runs all tests, including tests for wasm32-unknown-unknown
targets (Node.js, Chrome, Firefox).
just start-web
Builds the WebAssembly project and starts a local version of the postman2openapi site.
just prepare
Builds the Rust library, the CLI, the Node.js library, and the Web site. Then all tests are run.
Apache License 2.0 (Apache-2.0)
FAQs
Convert a Postman collection to an OpenAPI definition.
The npm package postman2openapi receives a total of 15,193 weekly downloads. As such, postman2openapi popularity was classified as popular.
We found that postman2openapi demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.