npmpackage.info

Gathering detailed insights and metrics for ibm-openapi-validator

Other packages similar to ibm-openapi-validator

@types/ibm-openapi-validator

0.15.4

TypeScript definitions for ibm-openapi-validator

@pca-experimental/ibm-openapi-validator

0.2.0

Configurable and extensible validator/linter for OpenAPI documents

hpl002-oap-oats

1.0.0

Tiny module that wraps IBM/openapi-validator and reads .validaterc directly from file

Gathering detailed insights and metrics for ibm-openapi-validator

ibm-openapi-validator - 1.35.2 | npmpackage.info

ibm-openapi-validator

Configurable and extensible validator/linter for OpenAPI documents

1.35.2

560

Apache-2.0

JavaScript

339.84 kB

4.6

Installations

npm install ibm-openapi-validator

Developer Guide

BETA

Typescript

No

Module System

N/A

Min. Node Version

>=16.0.0

Node Version

20.19.1

NPM Version

9.9.4 Pull Requests

Open

8

Total

573

Closed

78

Merged

487

Issues

Open

11

Total

175

Closed

164

Releases

446

ibm-openapi-validator@1.35.2

Updated on May 05, 2025

ibm-openapi-validator@1.35.1

Updated on May 02, 2025

@ibm-cloud/openapi-ruleset@1.31.1

Updated on May 02, 2025

ibm-openapi-validator@1.35.0

Updated on Apr 23, 2025

@ibm-cloud/openapi-ruleset@1.31.0

Updated on Apr 23, 2025

@ibm-cloud/openapi-ruleset-utilities@1.9.0

Updated on Apr 23, 2025

View All 446 releases

Languages

JavaScript

Shell

Dockerfile

Mustache

JavaScript (99.77%)

Shell (0.13%)

Dockerfile (0.07%)

Mustache (0.03%)

Developer

IBM

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

Apache-2.0 License

560 Stars

1,471 Commits

92 Forks

21 Watchers

10 Branches

57 Contributors

Updated on Jul 17, 2025

Maintainers

View All 57 Contributors

Package Meta Information

Latest Version

1.35.2

Package Id

ibm-openapi-validator@1.35.2

Unpacked Size

339.84 kB

Size

65.45 kB

File Count

110

NPM Version

9.9.4

Node Version

20.19.1

Published on

May 05, 2025

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

OpenAPI Validator

The IBM OpenAPI Validator lets you validate OpenAPI 3.0.x and OpenAPI 3.1.x documents for compliance with the OpenAPI specifications, as well as IBM-defined best practices.

Note: this page displays abbreviated usage info for getting started. Visit this page for the full documentation.

Installation

npm install -g ibm-openapi-validator

The -g flag installs the tool globally so that the validator can be run from anywhere in the file system. Alternatively, you can pass no flag or the --save-dev flag to add the validator as a dependency to your project and run it from your NPM scripts or JavaScript code.

Usage

Command Syntax

1Usage: lint-openapi [options] [file...]
2
3Run the validator on one or more OpenAPI 3.x documents
4
5Options:
6  -c, --config <file>            use configuration stored in <file> (*.json, *.yaml, *.js)
7  -e, --errors-only              include only errors in the output and skip warnings (default is false)
8  -i, --ignore <file>            avoid validating <file> (e.g. -i /dir1/ignore-file1.json --ignore /dir2/ignore-file2.yaml ...) (default is []) (default: [])
9  -j, --json                     produce JSON output (default is text)
10  -l, --log-level <loglevel>     set the log level for one or more loggers (e.g. -l root=info -l ibm-schema-description-exists=debug ...)  (default: [])
11  -n, --no-colors                disable colorizing of the output (default is false)
12  -r, --ruleset <file>           use Spectral ruleset contained in `<file>` ("default" forces use of default IBM Cloud Validation Ruleset)
13  -s, --summary-only             include only the summary information and skip individual errors and warnings (default is false)
14  -q, --impact-score             compute scores representing the API impact of rule violations and include with the results (default is false)
15  -m, --markdown-report          generate a Markdown file with a report on all validator results (default is false)
16  -w, --warnings-limit <number>  set warnings limit to <number> (default is -1)
17  --version                      output the version number
18  -h, --help                     display help for command

where [file...] is a space-separated list containing the filenames of one or more OpenAPI 3.x documents to be validated.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

8

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

4

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

1

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 1

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/IBM/openapi-validator/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/IBM/openapi-validator/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/IBM/openapi-validator/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/IBM/openapi-validator/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/IBM/openapi-validator/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/IBM/openapi-validator/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/IBM/openapi-validator/docker.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/IBM/openapi-validator/docker.yaml/main?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating node:18-alpine to node:18-alpine@sha256:8d6421d663b4c28fd3ebc498332f249011d118945588d0a35cb9bc4b8ca09d9e
Warn: pipCommand not pinned by hash: .github/workflows/build.yaml:41
Warn: npmCommand not pinned by hash: .github/workflows/build.yaml:93
Info: 0 out of 8 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 1 containerImage dependencies pinned
Info: 2 out of 3 npmCommand dependencies pinned
Info: 0 out of 1 pipCommand dependencies pinned

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Signed-Releases

Determines if the project cryptographically signs release artifacts.

0

Fuzzing

Determines if the project uses fuzzing.

0

Security-Policy

Determines if the project has published a security policy.

0

SAST

Determines if the project uses static code analysis.

Score

4.6

/10

Last Scanned on 2025-07-14

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to ibm-openapi-validator

Other packages similar to ibm-openapi-validator

ibm-openapi-validator

Installations

Developer Guide

No

N/A

>=16.0.0

20.19.1

9.9.4

Pull Requests

8

573

78

487

Issues

11

175

164

Releases

Languages

Developer

IBM

Download Statistics

GitHub Statistics

Maintainers

Package Meta Information

Total Downloads

NaN

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Dev Dependencies

OpenAPI Validator

Installation

Usage

Command Syntax

Further Reading

10

10

10

10

8

4

1

0

0

0

0

0

0

4.6

/10