Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
gem install jirasync
The following command will start synchronising the project MYPROJ
from the server at
https://jira.myorganisation.com
. The issues from that project will be written to the
issues/MYPROJ
folder:
jira-sync \
--baseurl https://jira.myorganisation.com \
--project MYPROJ \
--user jira_user \
--password jira_password \
--target issues/MYPROJ/raw \
fetch
When this passes successfully the issues/MYPROJ/raw
directory will contain the following structure:
MYPROJ-1.json
MYPROJ-2.json
MYPROJ-3.json
MYPROJ-4.json
…
sync_state.json
Each issue file contains a pretty-printed json representation of the ticket. The modified date of the files is set to
the value of the updated
field of the corresponding ticket, so that a makefile can be used to render the
json files incrementally into a more readable representation.
The sync_state.json
file contains information about the last sync, such as the time and errors that occurred.
The following statement will sync issues that have changed or where added during the last sync:
jira-sync \
--baseurl https://jira.myorganisation.com \
--project MYPROJ \
--user jira_user \
--password jira_password \
--target issues/MYPROJ/raw \
update
Passing in the --store-attachments
option leads to attachments being fetched and stored in the local filesystem.
They will we be stored in the attachments/
sub-directory of the target directory.
While JSON files are very handy to use in code, they are not very readable. The jira-format-issues
command
formats JSON issues to markdown. It is invoked as follows:
jira-format-issues \
--source issues/MYPROJ/raw\
--target issues/MYPROJ/markdown
This will create the following structure in the issues/MYPROJ/markdown
:
MYPROJ-1.md
MYPROJ-2.md
MYPROJ-3.md
MYPROJ-4.md
…
The individual files look like this:
[MYPROJ-1](https://jira.myorganisation.com/browse/MYPROJ-1): Build a working System
===================================================================================
Type
: Story
Status
: Closed
Reporter
: fleipold
Labels
: triaged
Updated
: 20. Jan 2014 11:30 (UTC)
Created
: 01. Aug 2013 12:29 (UTC)
Description
-----------
The myproj system shall be built to be *delpoyable* and *working*.
Comments
--------
### fleipold - 20. Jan 2014 12:19 (UTC):
Is this still relevant?
These files can be easily searched by ensuring they get indexed by a desktop search engine, e.g. spotlight on the Mac.
There is also the possibility to render custom jira fields by supplying a custom data file, which declares simple
data fields which are rendered as definitions at the top of the ticket and sections that are rendered as one or more paragraphs
with a heading. Here is an example file, custom-data.json
:
{
"simple_fields" : {
"Audience" : ["customfield_10123", "value"]
},
"sections" : {
"Release Notes" : ["customfield_10806"]
}
}
This file can be passed in like this:
jira-format-issues \
--source issues/MYPROJECT/json \
--target issues/MYPROJECT/markdown \
--custom-data-path custom-data.json
If a single-sign-on solution is used, jira-sync
can also use the session
cookie to authenticate requests to jira.
Having a local, unix-friendly copy of all tickets to avoid JIRA performance issues and make information available offline.
FAQs
Unknown package
We found that jirasync demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.