Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
typedoc-plugin-typescript-declaration
Advanced tools
Typedoc plugin to render to typescript declaration file
This is a Typedoc plugin that renders a TypeScript declaration file.
npm install typedoc typedoc-plugin-typescript-declaration --save-dev
Used as a plugin with Typedoc:
# generate Typedoc documentation as well as the type declaration
node_modules/.bin/typedoc --out docs --declarationFile docs/index.d.ts
# generate type declaration file without Typedoc documentation (omit --out, or inclue --declarationOnly)
node_modules/.bin/typedoc --declarationFile docs/index.d.ts
# generate type declaration file for a specific file
# node_modules/.bin/typedoc --declarationFile <output-file> [file]
node_modules/.bin/typedoc --declarationFile docs/index.d.ts src/index.ts
# write declaration file for types with a max version of 1.0
node_modules/.bin/typedoc --out docs/v1.0 --declarationFile docs/v1.0/index.d.ts --maxVersion 1.0
# write declaration file for types with a max version of 2.0
node_modules/.bin/typedoc --out docs/v2.0 --declarationFile docs/v2.0/index.d.ts --maxVersion 2.0
Used as a stand alone cli (works with the same options above):
# using npx
npx typedoc-plugin-typescript-declaration --declarationFile index.d.ts
# optionally install this package globally
npm install --global typedoc-plugin-typescript-declaration
# generate type declaration file with max version 2.0
node_modules/.bin/typedoc-declare --declarationFile index.d.ts --maxVersion 2.0
# when installed globally
typedoc-declare --declarationFile index.d.ts --maxVersion 2.0
Reasons for using this plugin:
@internal
or @hidden
types in your documentation that you would like reflected in your type definitionsYou can target multiple versions of the type definitions by using the @since <version>
tag and suppliying a maximum version number with --maxVersion <version>
. Any definitions tagged with a @since
version greater than the --maxVersion
will be filtered out.
Sample file:
export class MyClass {
originalFunction() {}
/**
* @since 1.0
*/
newFunction() {}
/**
* @since 2.0
*/
newerFunction() {}
}
Command:
# write declaration file for types with a max version of 1.0
node_modules/.bin/typedoc --declarationFile docs/v1.0/index.d.ts --maxVersion 1.0
# write declaration file for types with a max version of 2.0
node_modules/.bin/typedoc --declarationFile docs/v2.0/index.d.ts --maxVersion 2.0
keyof
typesYou can use this plugin to @inline keyof
types directly into a union to produce a more concise document and .d.ts
file.
In addition to comments for each of the keys will also be documented as part of the @inline
type.
Sample file:
/**
* @inline
*/
type SwitchState = keyof {
/**
* Switch is on
*/
on: string,
/**
* Switch is off
*/
off: string,
/**
* State of the switch is uknown
*
* @since 2.0
*/
unknown: string,
};
Produces the following (with --maxVersion 1.0
):
/**
* Options:
*
* - `on`:
* Switch is on
*
* - `off`:
* Switch is off
*/
type SwitchState = "on" | "off";
FAQs
Typedoc plugin to render to typescript declaration file
The npm package typedoc-plugin-typescript-declaration receives a total of 0 weekly downloads. As such, typedoc-plugin-typescript-declaration popularity was classified as not popular.
We found that typedoc-plugin-typescript-declaration demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.