
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
A script to validate XML files for the game 'The Binding of Isaac: Repentance'
This repo contains:
online-xml-to-xsd-converter
tool.)You can view the website here.
Most people create Binding of Isaac mods (and other software) using VSCode, which is a very nice text editor / IDE.
If you make a typo (or some other error) in your XML file, you can get VSCode to automatically show you the error with a little red squiggly line, which is really helpful. This is accomplished by specifying a link to the corresponding schema at the top of the file.
First, make sure that you have the XML extension by Red Hat installed. Next, add the following to the top of your XML file:
<?xml-model href="https://wofsauge.github.io/isaac-xml-validator/xsd/[NAME OF THE FILE].xsd" ?>
For example, this is how it would look for a "babies.xml" file:
<?xml-model href="https://wofsauge.github.io/isaac-xml-validator/xsd/babies.xsd" ?>
<babies root="gfx/Characters/Player2/">
<baby id="0" name="Spider Baby" skin="000_Baby_Spider.png" />
<baby id="1" name="Love Baby" skin="001_Baby_Love.pngz" /> <!-- shows an error, because the "skin" attribute doesn't contain a .png file, but a .pngz-->
<baby id="2" name="Bloat Baby" skin="002_Baby_Bloat.png" />
</babies>
Note that by default, the XML extension caches the XSD files in the following location:
C:\Users\%USERNAME%\.lemminx\cache\https\wofsauge.github.io\isaac-xml-validator
You can remove this directory if you want to purge the cache to download any potentially updated XSD files.
The tool is published to PyPI, so you can install it via:
pip install isaac-xml-validator
Then, you can run it via:
isaac-xml-validator
By default, it will recursively scan for all XML files in the current working directory.
You will likely want to set up your repository so that the script runs in CI (e.g. GitHub Actions).
For most users, you will probably want to manually integrate the Python script into your existing lint routine. Alternatively, you can use a GitHub action that automatically invokes the script.
For most users, you will probably want to manually integrate the Python script into your existing lint routine. Alternatively, you can use a Docker Image that contains the script and its dependencies.
If you need to create new XSD files, you can import our common XML schema like this:
<xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsisaac="https://wofsauge.github.io/isaac-xml-validator">
<xs:import schemaLocation="https://wofsauge.github.io/isaac-xml-validator/xsd/isaacTypes.xsd" namespace="https://wofsauge.github.io/isaac-xml-validator" />
<xs:element name="Test">
<xs:complexType>
<xs:attribute name="root" type="xsisaac:pngFile" />
</xs:complexType>
</xs:element>
</xs:schema>
FAQs
A script to validate XML files for the game 'The Binding of Isaac: Repentance'
We found that isaac-xml-validator demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.