
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
At Zuplo we believe that the better the quality of an OpenAPI document, the better the developer experience will be for the consumers of that API. This experience is important for the success of an API.
Rate My OpenAPI is a suite of tools designed to help software developers using OpenAPI to meet high standards of quality and usability when designing and developing their APIs.
The CLI tool is perfect for developers who prefer working from the command line or need to integrate quality checks into their development workflow. It provides the same lint results as the website with the added benefit of it being easier to integrate into your development workflow
npm install -g rmoa
You can use the CLI to lint & get a score for your OpenAPI definition in a format that's easier to parse and integrate with your development workflow.
You will need an API key as the CLI uses the Rate My OpenAPI APIs which require the use of an API Key. You can sign up for free at https://api.ratemyopenapi.com/docs to get your API Key.
CAUTION: All reports generated by Rate My OpenAPI are public (with an unguessable UUID URL), even if uploaded with an API Key. Anyone with the URL to your report will be able to access the report.
Lint an OpenAPI definition, json or yaml format, using the CLI's default configuration by running:
rmoa lint --filename <openapi-filename> --api-key <API_KEY>
Lint an OpenAPI definition using the CLI's and override the minimum passing score (default is 80 out of 100), set the maximum number of allowed warnings & errors and get the output in json format.
rmoa lint --filename <openapi-filename> --api-key <API_KEY> --minimum-score 60
rmoa <command>
Commands:
rmoa lint
Lint & get a score for your OpenAPI definition using the Rate My OpenAPI ruleset
Options:
--version Show version number [boolean]
--help Show help [boolean]
--api-key Your Rate My OpenAPI API Key [string] [required]
--filename The OpenApi file name to process [string] [required]
--dir The directory containing your OpenAPI file
[string] [default: "."]
--output default, json [string] [default: "default"]
--max-warnings The maximum number of warnings allowed before labeling the ru
n as failed. [number]
--max-errors The maximum number of errors allowed before labeling the run
as failed. [number]
--minimum-score The minimum score (0 - 100) to label a lint run as successful
/passing. Default is 80. [number] [default: 80]
FAQs
The command-line interface for Rate My OpenAPI
The npm package rmoa receives a total of 18 weekly downloads. As such, rmoa popularity was classified as not popular.
We found that rmoa demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.