Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
zendesk_app_migrator
Advanced tools
The App Migration Helper is CLI tool for assisting with the migration of v1 App Framework apps to v2
The migrator executes a series of tasks to:
"frameworkVersion": "2.0"
The migrator has a hard dependency on the public App Scaffold project.
When a v1 app is migrated, we leverage the features already built into the App Scaffold to transpile v1 app assets for v2.
Option | Default | Required | Description |
---|---|---|---|
-p --path | Yes | The location of the v1 app | |
-r --replace-v1 | false | No | Whether to backup v1 files, and replace with v2 during migration. Backed up files will be moved to a v1 folder, alongside the new v2 files. |
-a --auto | false | No | Enables more end-to-end transformations of JavaScript, and CSS code. See the expanded Auto option section below for more details. |
Please note that auto transforms may not work as expected. Use with caution, and always test extensively after migration. For a better understanding of how auto transforms are expected to behave, look at tests for the migrate_app_js step tests. Transforms currently available:
zdSelectMenu
API available in v1.Source files are under src
, test files under src/test
. The codebase
currently makes use of ES6 features by way of the Typescript compiler. To that
end, all of the source code is written in Typescript. An added bonus is that the
package will ship with type declarations alongside the JavaScript.
You will need:
Yarn
NodeJS
brew install yarn && yarn install
Dependencies are declared via yarn
in the package.json
file.
Optionally install ts-node
and typescript
globally, like npm install -g ts-node typescript
.
Run ts-node src/index.ts migrate --path ~/path/to/v1/app/source
If not installing ts-node
and typescript
globally, reference the local
versions of those packages like ./node_modules/.bin/ts-node src/index.ts migrate --path ~/path/to/v1/app/source
After running yarn build
, it is possible to run the down-level version of the
Migrator like node ./lib/index.js migrate --path ~/path/to/v1/app/source
.
Similarly, the down-level tests can be run like ./node_modules/.bin/mocha ./lib/test/**/*.test.js
. Doing so effectively just demonstrates that the output
from the Typescript compiler is valid JavaScript for NodeJS.
yarn test
Tests are run using the mocha
test runner.
chai
is the assertion library. We make use of
chai-as-promised
to provide
more elegant assertions against async behaviour.
yarn test-watch
yarn build
yarn build-watch
We welcome contributions. First, please read the Pull Request Guidelines and Style Guide pages on our wiki.
The App Migrator will be deployed as a node package, and/or as a dependency of other projects.
FAQs
CLI to migrate v1 zendesk_app_framework apps to v2
The npm package zendesk_app_migrator receives a total of 2 weekly downloads. As such, zendesk_app_migrator popularity was classified as not popular.
We found that zendesk_app_migrator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.