Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
At Zuplo we believe that the better the quality of an OpenAPI document, the better the developer experience will be for the consumers of that API. This experience is important for the success of an API.
Rate My OpenAPI is a suite of tools designed to help software developers using OpenAPI to meet high standards of quality and usability when designing and developing their APIs.
The CLI tool is perfect for developers who prefer working from the command line or need to integrate quality checks into their development workflow. It provides the same lint results as the website with the added benefit of it being easier to integrate into your development workflow
npm install -g rmoa
You can use the CLI to lint & get a score for your OpenAPI definition in a format that's easier to parse and integrate with your development workflow.
You will need an API key as the CLI uses the Rate My OpenAPI APIs which require the use of an API Key. You can sign up for free at https://api.ratemyopenapi.com/docs to get your API Key.
CAUTION: All reports generated by Rate My OpenAPI are public (with an unguessable UUID URL), even if uploaded with an API Key. Anyone with the URL to your report will be able to access the report.
Lint an OpenAPI definition, json or yaml format, using the CLI's default configuration by running:
rmoa lint --filename <openapi-filename> --api-key <API_KEY>
Lint an OpenAPI definition using the CLI's and override the minimum passing score (default is 80 out of 100), set the maximum number of allowed warnings & errors and get the output in json format.
rmoa lint --filename <openapi-filename> --api-key <API_KEY> --minimum-score 60
rmoa <command>
Commands:
rmoa lint
Lint & get a score for your OpenAPI definition using the Rate My OpenAPI ruleset
Options:
--version Show version number [boolean]
--help Show help [boolean]
--api-key Your Rate My OpenAPI API Key [string] [required]
--filename The OpenApi file name to process [string] [required]
--dir The directory containing your OpenAPI file
[string] [default: "."]
--output default, json [string] [default: "default"]
--max-warnings The maximum number of warnings allowed before labeling the ru
n as failed. [number]
--max-errors The maximum number of errors allowed before labeling the run
as failed. [number]
--minimum-score The minimum score (0 - 100) to label a lint run as successful
/passing. Default is 80. [number] [default: 80]
FAQs
The command-line interface for Rate My OpenAPI
The npm package rmoa receives a total of 7 weekly downloads. As such, rmoa popularity was classified as not popular.
We found that rmoa demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.