Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
RAML is a language for modeling RESTful APIs. By design, it does not enforce any style rules on how to consistently document APIs, because not all projects will require the same level of rule enforcement. However, it can often be useful to enforce uniform rules and standards across a group of related APIs to ensure consistency and uniformity across multiple teams or business units.
RAML Linter is a static analysis, linter-like, utility that will enforce rules on a given RAML document, ensuring consistency and quality.
npm install -g ramllint
RAML Linter can be used either as a library or as a command line utility.
Using the library in code provides the most flexibility, offering error
handling and the ability to parse the full results for: error
, warning
, and
info
log entries.
var Linter = require('ramllint'),
ramllint = new Linter();
ramllint('./path/to/api.raml', function (results) {
// NOTE: results will only contain 'error' and will exclude 'warning' and 'info'
// to get an array of all log entries use: `ramllint.results()`
if (!results.length) {
// no errors, all rules are satisfied
} else {
// errors
}
});
If you are in the same directory as your RAML document:
ramllint
If your RAML document is in another directory:
ramllint path/to/api.raml
npm
) ScriptsBelow is a list of commands available via npm run
for you convenience:
npm run cover
for TravisCI onlynpm run doc
npm run doc:pub
for publishing docs/
to gh-pagesnpm run lint
- static code analysis and code style linting
npm run quality
- runs lint
and code coveragenpm test
- runs unit tests (Mocha)npm run watch
- watches test/
and src/
for changes and re-runs testsgit clone
npm install
This project aims to maintain a high level of unit test code coverage. All pull requests must be accompanied by appropriate test cases, and all tests must pass in order to be considered for merge.
For detailed rules on contributions, please refer to our contribution guidelines.
FAQs
RAML Lint
The npm package ramllint receives a total of 2 weekly downloads. As such, ramllint popularity was classified as not popular.
We found that ramllint demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.