Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
veritone-json-schemas
Advanced tools
JSON Schemas, their examples, and helper functions used across Veritone
This repo contains all the static JSON schemas used by Veritone. This does not include the user-defined schemas registered through Veritone Developer, just the ones that are core to our platform.
This package exports a map of valid validation contract names to their validating functions and looks like the following:
{
VALIDATORS: {
"transcript": validateTranscript
"object: validateObject
...
},
validateTranscript: fn(),
validateObject: fn(),
...
}
It also outputs all the json-schemas and the valid and invalid examples used in our tests for reference and use in non-javascript contexts.
PLEASE NOTE that the json-schema validation ecosystem is not 100% compatible. Different json-schema parsers and validators may behave slightly differently. At Veritone, we use
ajv
which works great with the draft-07 json-schemas we've written. And we try to keep our schemas simple and not use too many advanced features to increase the chance of compatibility with other packages. So if you do use another package to parse our json-schemas, hopefully things will "just work" but don't be surprised if there's a few quirks.
The AION validator is in a different class than the other validators. Most validators are tied to the validationContracts
value and are for validating a file for a specific capability like transcription, concepts, object detection, etc. In contrast
the AION validator will validate an entire file regardless of what specific types of data it represents. Just because a
file is a valid AION file does not automatically make it valid for any given capability as different capabilities require
specific fields for that capability. For instance, a transcription file MUST contain a series
of words
to be valid,
but an AION file only MAY contain a series of words. Being a valid AION file is necessary for a capability but not
sufficient for a capability.
So what is the AION validator for then? It has two purposes:
application/vnd.veritone.aion+json
Media Type file (f.k.a. MIME Types).
See IANA's list of Media Types for details.See the veritone-sdk README for full information.
yarn install
to install dependencies.yarn test
to run the schema validator against all the examples.Copyright 2019-2021, Veritone Inc.
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
FAQs
JSON Schemas, their examples, and helper functions used across Veritone
The npm package veritone-json-schemas receives a total of 286 weekly downloads. As such, veritone-json-schemas popularity was classified as not popular.
We found that veritone-json-schemas demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.