
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Author: Stephen Bailey (sbailey@immuta.com)
This is a Singer tap that produces JSON-formatted data following the Singer spec.
It can generate a catalog of available data in Clockify and extract the following resources:
{
"api_key": "string",
"workspace": "string",
"start_date": "2020-04-01T00:00:00Z"
}
git clone git@github.com:immuta/tap-clockify.git
cd tap-clockify
pip install .
Get an API key from Clockify
Create the config file.
There is a template you can use at config.json.example
, just copy it to config.json
in the repo root and insert your token
tap-clockify -c config.json --discover > catalog.json
Step 4 generates a a file called catalog.json
that specifies all the available endpoints and fields. You'll need to open the file and select the ones you'd like to replicate. See the Singer guide on Catalog Format for more information on how tables are selected.
tap-clockify -c config.json --catalog catalog.json
Would like to acknowledge the folks at Fishtown Analytics whose tap-framework
and tap-lever
packages formed the foundation for this package.
Copyright © 2019 Immuta
FAQs
Singer tap for Clockify, built with the Meltano SDK for Singer Taps.
We found that tap-clockify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.