Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
zapier-platform-schema
Advanced tools
This is currently pre-release software! You can fill out https://zapier.typeform.com/to/Z4TZBm if you'd like early access.
This repo has:
examples/definition.json
with some triggers, searches and actions.schema.js
(and corresponding lib/schemas/*.js
) that can validate the examples/definition.json
.exported-schema.json
suitable for loading into any other backend that needs validation.Make sure you have Node 4.3.2+. If not, do:
brew install nvm
nvm install 4.3.2
nvm use 4.3.2
git git@github.com:zapier/zapier-platform-schema.git
cd zapier-platform-schema
npm install
npm test
# also ran in Travis CI
Open a PR and propose the changes you'd like to make. Be sure to update both files!
This is a living specification - we might come up with more definitions like:
examples/definition-oauth.json
examples/definition-search-or-write.json
Once we are pretty happy with the collection - we'll be able to kick off a project with some solid foundational examples. That will help us write a core interpreter and a platform SDK and generator.
We've configured the proper npm version
behavior with pre/post hooks. This simplifies the publishing flow:
# do not edit package.json, exported-schema.json or docs.md - is automatic!
# be sure to do the same across the other libraries (cli and core)
npm version patch # 1.0.0 -> 1.0.1
npm version minor # 1.0.0 -> 1.1.0
npm version major # 1.0.0 -> 2.0.0
FAQs
Schema definition for CLI apps in the Zapier Developer Platform.
The npm package zapier-platform-schema receives a total of 17,818 weekly downloads. As such, zapier-platform-schema popularity was classified as popular.
We found that zapier-platform-schema demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.