Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
swagger-editor
Advanced tools
⏰️ Looking for the next generation version of Swagger Editor?
SwaggerEditor is now released under two major release channels:
Only SwaggerEditor@5 supports OpenAPI 3.1.0. SwaggerEditor@4 will not receive OpenAPI 3.1.0 support and is considered legacy at this point. The plan is to continually migrate fully to SwaggerEditor@5 and deprecate the SwaggerEditor@4 in the future.
🕰️ Looking for the older version of Swagger Editor? Refer to the 2.x or 3.x branches.
Swagger Editor lets you edit OpenAPI API definitions (OpenAPI 2.0 and OpenAPI 3.0.3) in JSON or YAML format inside your browser and to preview documentations in real time. Valid OpenAPI definitions can then be generated and used with the full Swagger tooling (code generation, documentation, etc).
As a brand-new version, written from the ground up, there are some known issues and unimplemented features. Check out the Known Issues section for more details.
This repository publishes to two different NPM modules:
If you're building a single-page application, using swagger-editor
is strongly recommended, since swagger-editor-dist
is significantly larger.
Swagger Editor uses Scarf to collect anonymized installation analytics. These analytics help support the maintainers of this library and ONLY run during installation. To opt out, you can set the scarfSettings.enabled
field to false
in your project's package.json
:
// package.json
{
// ...
"scarfSettings": {
"enabled": false
}
// ...
}
Alternatively, you can set the environment variable SCARF_ANALYTICS
to false
as part of the environment that installs your npm packages, e.g., SCARF_ANALYTICS=false npm install
.
Any of the scripts below can be run by typing npm run <script name>
in the project's root directory.
Script name | Description |
---|---|
dev | Spawn a hot-reloading dev server on port 3200. |
deps-check | Generate a size and licensing report on Swagger Editors's dependencies. |
lint | Report ESLint style errors and warnings. |
lint-errors | Report ESLint style errors, without warnings. |
lint-fix | Attempt to fix style errors automatically. |
watch | Rebuild the core files in /dist when the source code changes. Useful for npm link . |
Script name | Description |
---|---|
build | Build a new set of JS and CSS assets, and output them to /dist . |
build:bundle | Build swagger-editor-bundle.js only (commonJS). |
build:core | Build swagger-editor.(js|css) only (commonJS). |
build:standalone | Build swagger-editor-standalone-preset.js only (commonJS). |
build:stylesheets | Build swagger-editor.css only. |
build:es:bundle | Build swagger-editor-es-bundle.js only (es2015). |
build:es:bundle:core | Build swagger-editor-es-bundle-core.js only (es2015). |
Script name | Description |
---|---|
test | Run unit tests in Node, run Cypress end-to-end tests, and run ESLint in errors-only mode. |
test:unit-mocha | Run Mocha-based unit tests in Node. |
test:unit-jest | Run Jest-based unit tests in Node. |
e2e | Run end-to-end browser tests with Cypress. |
lint | Run ESLint test |
test:artifact | Run list of bundle artifact tests in Jest |
test:artifact:umd:bundle | Run unit test that confirms swagger-editor-bundle exports as a Function |
test:artifact:es:bundle | Run unit test that confirms swagger-editor-es-bundle exports as a Function |
test:artifact:es:bundle:core | Run unit test that confirms swagger-editor-es-bundle-core exports as a Function |
$ npm i --legacy-peer-deps
If you have Node.js and npm installed, you can run npm start
to spin up a static server.
Otherwise, you can open index.html
directly from your filesystem in your browser.
If you'd like to make code changes to Swagger Editor, you can start up a Webpack hot-reloading dev server via npm run dev
.
Swagger Editor works in the latest versions of Chrome, Safari, Firefox, and Edge.
To help with the migration, here are the currently known issues with 3.X. This list will update regularly, and will not include features that were not implemented in previous versions.
There is a docker image published in DockerHub.
To use this, run the following:
docker pull swaggerapi/swagger-editor
docker run -d -p 80:8080 swaggerapi/swagger-editor
This will run Swagger Editor (in detached mode) on port 80 on your machine, so you can open it by navigating to http://localhost
in your browser.
docker run -d -p 80:8080 -e URL="https://petstore3.swagger.io/api/v3/openapi.json" swaggerapi/swagger-editor
json
or yaml
definition file from your local host:docker run -d -p 80:8080 -v $(pwd):/tmp -e SWAGGER_FILE=/tmp/swagger.json swaggerapi/swagger-editor
Note: When both URL
and SWAGGER_FILE
environment variables are set, URL
has priority and SWAGGER_FILE
is ignored.
BASE_URL
variable for accessing the application - for example if you want the application to be available at http://localhost/swagger-editor/
:docker run -d -p 80:8080 -e BASE_URL=/swagger-editor swaggerapi/swagger-editor
PORT
variable for accessing the application, default is 8080
.docker run -d -p 80:80 -e PORT=80 swaggerapi/swagger-editor
GTM
variable for tracking the usage of the swagger-editor.docker run -d -p 80:8080 -e GTM=GTM-XXXXXX swaggerapi/swagger-editor
You can also customize the different endpoints used by the Swagger Editor with the following environment variables. For instance, this can be useful if you have your own Swagger generator server:
Environment variable | Default value |
---|---|
URL_SWAGGER2_GENERATOR | https://generator.swagger.io/api/swagger.json |
URL_OAS3_GENERATOR | https://generator3.swagger.io/openapi.json |
URL_SWAGGER2_CONVERTER | https://converter.swagger.io/api/convert |
If you want to run the Swagger Editor locally without the Codegen features (Generate Server and Generate Client) you can set the above environment variables to null
(URL_SWAGGER2_CONVERTER=null
).
To build and run a docker image with the code checked out on your machine, run the following from the root directory of the project:
# Install npm packages (if needed)
npm install
# Build the app
npm run build
# Build an image
docker build -t swagger-editor .
# Run the container
docker run -d -p 80:8080 swagger-editor
You can then view the app by navigating to http://localhost
in your browser.
[!IMPORTANT] By older versions we specifically refer to
React >=17 <18
.
By default swagger-editor@4 npm package comes with latest version of React@18. It's possible to use swagger-editor@4 npm package with older version of React.
Let's say my application integrates with swagger-editor@4 npm package and uses React@17.0.2.
In order to inform swagger-editor@4
npm package that I require it to use my React version, I need to use npm overrides.
{
"dependencies": {
"react": "=17.0.2",
"react-dom": "=17.0.2"
},
"overrides": {
"swagger-editor": {
"react": "$react",
"react": "$react-dom",
"react-redux": "^8"
}
}
}
[!NOTE] The React and ReactDOM override are defined as a reference to the dependency. Since react-redux@9 only supports
React >= 18
, we need to use react-redux@8.
In order to inform swagger-editor@4
npm package that I require it to use my specific React version, I need to use yarn resolutions.
{
"dependencies": {
"react": "17.0.2",
"react-dom": "17.0.2"
},
"resolutions": {
"swagger-editor/react": "17.0.2",
"swagger-editor/react-dom": "17.0.2",
"swagger-editor/react-redux": "^8"
}
}
[!NOTE] The React and ReactDOM resolution cannot be defined as a reference to the dependency. Unfortunately yarn does not support aliasing like
$react
or$react-dom
as npm does. You'll need to specify the exact versions.
Please disclose any security-related issues or vulnerabilities by emailing security@swagger.io, instead of using the public issue tracker.
FAQs
Swagger Editor
The npm package swagger-editor receives a total of 7,083 weekly downloads. As such, swagger-editor popularity was classified as popular.
We found that swagger-editor demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.