Gathering detailed insights and metrics for @salesforce/apex-tmlanguage
Gathering detailed insights and metrics for @salesforce/apex-tmlanguage
Installations
npm install @salesforce/apex-tmlanguageDeveloper
forcedotcom
Developer Guide
BETA
Module System
Unable to determine the module system for this package.
Min. Node Version
>=16
Typescript Support
No
Node Version
18.15.0
NPM Version
9.5.0
Statistics
35 Stars
130 Commits
8 Forks
27 Watching
6 Branches
32 Contributors
Updated on 11 Sept 2024
Languages
TypeScript (99.07%)
JavaScript (0.93%)
Total Downloads
Cumulative downloads
Total Downloads
225,651
Last day
14.6%
102
Compared to previous day
Last week
7.6%
987
Compared to previous week
Last month
-15%
7,318
Compared to previous month
Last year
3.4%
68,388
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Versions
Salesforce Apex Language Grammar
Introduction
This repository contains the source code for generating the language grammar files for Salesforce's Apex.
Disclaimer
Development and setup of this project has not been tested for Windows OS. You may see a node-gyp error - follow the instrutions here to resolve it.
Development
To build and test install Node.js do the following:
- Run
yarn installto install any dependencies. - Run
yarn run buildto build using gulp. - Run
yarn run testto run tests.
Output grammars are output in the grammars/ directory.
To see the token changes from within the Salesforce VS Code Extensions:
- Copy the
apex.tmLanguageresults into../salesforcedx-vscode/packages/salesforcedx-vscode-apex/node_modules/@salesforce/apex-tmlanguage/grammars/apex.tmLanguage. - From the
Command PaletteselectDeveloper: Inspect Editor Tokens and Scopes.
Adding grammar rules
Token structure is based off of Textmate's Language Grammar guidelines
Tests for SOQL grammar
For the standalone SOQL grammar, tests are executed with vscode-tmgrammar-tests.
test/soql/
|-- simple_account.soql "Manually" created test cases
|-- ...
`-- snapshots/ "Snapshot-based" test cases
|-- example-*.soql
|-- example-*.soql.snap
`-- ...
The difference between manual vs. snapshot tests is that the latter are auto-generated and can be updated with command vscode-tmgrammar-snap -u. They are useful to quickly see the output of applying the grammar and catch regressions.
The example-* queries were taken from Example SELECT clauses.
Supported outputs
grammars/apex.tmLanguage.cson- for Atomgrammars/apex.tmLanguage- TextMate grammar (XML plist)grammars/soql.tmLanguage- TextMate grammar (XML plist) for standalone SOQL files
Releasing
Merges to main on this repo with commits of type 'feat' or 'fix' get automatically published as a GitHub release and an NPM package through Github Actions.
Attribution
This repository was copied from https://github.com/dotnet/csharp-tmLanguage
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Info: Found linked content: SECURITY.md:1
- Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy
- Info: Found text in security policy: SECURITY.md:1
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
Found 18/29 approved changesets -- score normalized to 6
Reason
dependency not pinned by hash detected -- score normalized to 5
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/manualRelease.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/forcedotcom/apex-tmLanguage/manualRelease.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/manualRelease.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/forcedotcom/apex-tmLanguage/manualRelease.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/slackNotify.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/forcedotcom/apex-tmLanguage/slackNotify.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validatePR.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/forcedotcom/apex-tmLanguage/validatePR.yml/main?enable=pin
- Info: 0 out of 3 GitHub-owned GitHubAction dependencies pinned
- Info: 2 out of 3 third-party GitHubAction dependencies pinned
Reason
9 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-4gmj-3p3h-gm8h
- Warn: Project is vulnerable to: GHSA-4q6p-r6v2-jvc5
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-qrpm-p2h7-hrv2
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/manualRelease.yml:1
- Warn: no topLevel permission defined: .github/workflows/onPushToMain.yml:1
- Warn: no topLevel permission defined: .github/workflows/onRelease.yml:1
- Warn: no topLevel permission defined: .github/workflows/slackNotify.yml:1
- Warn: no topLevel permission defined: .github/workflows/testCommitExceptMain.yml:1
- Warn: no topLevel permission defined: .github/workflows/validatePR.yml:1
- Info: no jobLevel write permissions found
Reason
project is archived
Details
- Warn: Repository is archived.
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
Project has not signed or included provenance with any releases.
Details
- Warn: release artifact v1.2.0 not signed: https://api.github.com/repos/forcedotcom/apex-tmLanguage/releases/19729107
- Warn: release artifact v1.2.0 does not have provenance: https://api.github.com/repos/forcedotcom/apex-tmLanguage/releases/19729107
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 22 are checked with a SAST tool
Score
4
/10
Last Scanned on 2024-11-25
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More