npmpackage.info

Gathering detailed insights and metrics for @har-sdk/core

Other packages similar to @har-sdk/core

@har-sdk/types

1.1.9

**THIS PACKAGE HAS BEEN DEPRECATED. THE DEVELOPMENT HAS MOVED TO A [@HAR-SDK/CORE](https://github.com/NeuraLegion/har-sdk/tree/master/packages/oas#readme) PACKAGE**

@har-sdk/core

HAR SDK enables Node.js developers to easily work with HAR, convert it from OAS/Swagger and Postman collection, and more.

1.4.5

MIT

TypeScript

11.73 kB

125,040 4

Installations

npm install @har-sdk/core

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Node Version

18.14.1

NPM Version

8.19.3 Score

82.2

Supply Chain

91.4

Quality

78.1

Maintenance

100

Vulnerability

99.6

License

Pull Requests

Open

9

Total

161

Closed

11

Merged

141

Issues

Open

12

Total

93

Closed

81

Releases

214

@har-sdk/oas@2.10.0

Published on 07 Oct 2024

@har-sdk/postman@2.4.6

Published on 22 Aug 2024

@har-sdk/oas@2.9.3

Published on 22 Aug 2024

@har-sdk/oas@2.9.2

Published on 14 Aug 2024

@har-sdk/openapi-sampler@2.2.1

Published on 14 Aug 2024

@har-sdk/oas@2.9.1

Published on 22 Apr 2024

View all 214 releases

Contributors

Unable to fetch Contributors

View all 25 contributors

Languages

TypeScript

JavaScript

Shell

TypeScript (98.02%)

JavaScript (1.94%)

Shell (0.04%)

Developer

NeuraLegion

Download Statistics

Total Downloads

125,040

Last Day

534

Last Week

3,470

Last Month

16,466

Last Year

104,606

GitHub Statistics

11 Stars

142 Commits

5 Forks

16 Watching

10 Branches

25 Contributors

Bundle Size

36.68 kB

Minified

11.73 kB

Minified + Gzipped

Bundlephobia

Maintainers

Package Meta Information

Latest Version

1.4.5

Package Id

@har-sdk/core@1.4.5

Unpacked Size

104.79 kB

Size

24.72 kB

File Count

105

NPM Version

8.19.3

Node Version

18.14.1

Publised On

23 Feb 2023

Total Downloads

Cumulative downloads

Total Downloads

125,040

Last day

-17.6%

534

Compared to previous day

Last week

-20.9%

3,470

Compared to previous week

Last month

5.3%

16,466

Compared to previous month

Last year

805.1%

104,606

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

js-yaml openapi-types tslib

Dev Dependencies

@types/js-yaml

Versions

@har-sdk/core

The base package can be used to import specification files (i.e. HAR, OAS and Postman Collection) and detect their type.

Setup

1npm i --save @har-sdk/core

Usage

To import a specification you just need to create an instance of SpecImporter and call its import method passing the data file. The importer performs syntactic analysis and parses a provided file.

1import { SpecImporter } from '@har-sdk/core';
2
3const result = await new SpecImporter().import(sourceAsString);
4console.log(result);
5// {
6//   type: 'postman',
7//   format: 'json',
8//   doc: {
9//     info: {
10//       name: 'Postman Sample',
11//       schema: 'https://schema.getpostman.com/json/collection/v2.1.0/collection.json'
12//     },
13//     item: [
14//       // ...
15//     ]
16//   },
17//   name: 'Postman Sample.json'
18// }

To configure the list of importers, you can pass them as an array to the constructor.

1import { SpecImporter, HarImporter } from '@har-sdk/core';
2
3const explorer = new SpecImporter([new HarImporter()]);

To extend an explorer by adding a new custom importer, you can easily implement an Importer interface.

1import { Importer, Doc, Spec, Importer } from '@har-sdk/core';
2
3class RamlImporter implements Importer<'raml'> {
4  get type(): 'raml' {
5    return 'raml';
6  }
7
8  async import(content: string): Promise<Spec<'raml'>> {
9    // your code
10
11    return {
12      // other fields
13      type: this.type,
14      format: 'yaml'
15    };
16  }
17}

The package also contains a set of useful utilities like normalizeUrl:

1import { normalizeUrl } from '@har-sdk/core';
2
3normalizeUrl('HTTP://example.COM////foo////dummy/../bar/?'); // http://example.com/foo/bar

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

9

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

5

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 5

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auto-build.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/NeuraLegion/har-sdk/auto-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auto-build.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/NeuraLegion/har-sdk/auto-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auto-build.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/NeuraLegion/har-sdk/auto-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auto-build.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/NeuraLegion/har-sdk/auto-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auto-build.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/NeuraLegion/har-sdk/auto-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auto-build.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/NeuraLegion/har-sdk/auto-build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/auto-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/NeuraLegion/har-sdk/auto-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auto-build.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/NeuraLegion/har-sdk/auto-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auto-build.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/NeuraLegion/har-sdk/auto-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auto-build.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/NeuraLegion/har-sdk/auto-build.yml/master?enable=pin
Info: 0 out of 9 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 1 third-party GitHubAction dependencies pinned
Info: 3 out of 3 npmCommand dependencies pinned

0

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

Security-Policy

Determines if the project has published a security policy.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Score

4

/10

Last Scanned on 2025-01-27

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More