clean-dependency-project / snakeyaml1-fnma Goto Github PK

View Code? Open in Web Editor NEW

1.0 6.0 3.0 14.4 MB

cleaner verion of snakeyaml v1.33 for users who are unable to upgrade to snakeyaml v2.x

License: Apache License 2.0

Shell 0.03% Java 99.97%

snakeyaml1-fnma's Introduction

Clean Dependency Project - snakeyam1-fnma : Cleaner Version of snakeyaml1.x

The art of simplicity is a puzzle of complexity.

Overview

YAML is a data serialization format designed for human readability and interaction with scripting languages.

SnakeYAML is a YAML 1.1 processor for the Java Virtual Machine version 8. For YAML 1.2 (which is a superset of JSON) you may have a look at SnakeYAML Engine

SnakeYAML features

a complete YAML 1.1 processor. (If you need YAML 1.2 support have a look here). In particular, SnakeYAML can parse all examples from the specification.
Unicode support including UTF-8/UTF-16 input/output.
high-level API for serializing and deserializing native Java objects.
support for all types from the YAML types repository.
relatively sensible error messages.
when you plan to feed the parser with untrusted data please study the settings which allow to restrict incoming data.

Info

Documentation

Contribute

If you find a bug in snakeyaml1-fnma, please file a bug report.
YAML community

snakeyaml1-fnma's People

Contributors

Stargazers

Watchers

Forkers

rvema sdevanab clean-dependency-project

snakeyaml1-fnma's Issues

Add code scanning capability

Update the project to make openssf scores better

Improve openssf scorecard score to > 7.5
Improve openssf best practices score to >75%

Create CI to publish the jar files to Github packages

Add Jacoco code coverage to the project

Fix CVE-2022-1471 in snakeyaml v 1.33

per CVE-2022-1471 the only way to get over the vulnerability is to move to snakeyaml 2.x which is a breaking change for some projects hence we would like to fix the fork of v1.33 and make it available to public who are in a comparable situation where the major version upgrade is not possible.

Fix is to force the yaml constructor to use only safeconstructor() and remove all other possibilities.

Yaml yaml = new Yaml(new SafeConstructor()); // just allow to use safeconstructor() and remove all other arguements

Repository Setup Checklist

Protect main branch and setup branch protection rules
Switch the branch from master to main

ERROR] MavenReportException: Error while generating Javadoc:
Exit code: 1 - /Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/DumperOptions.java:146: warning: no @param for flowStyle
    public static FlowStyle fromBoolean(Boolean flowStyle) {
                            ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/DumperOptions.java:146: warning: no @return
    public static FlowStyle fromBoolean(Boolean flowStyle) {
                            ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/nodes/CollectionNode.java:49: warning: no @param for tag
  public CollectionNode(Tag tag, Mark startMark, Mark endMark, Boolean flowStyle) {
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/nodes/CollectionNode.java:49: warning: no @param for startMark
  public CollectionNode(Tag tag, Mark startMark, Mark endMark, Boolean flowStyle) {
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/nodes/CollectionNode.java:49: warning: no @param for endMark
  public CollectionNode(Tag tag, Mark startMark, Mark endMark, Boolean flowStyle) {
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/nodes/CollectionNode.java:49: warning: no @param for flowStyle
  public CollectionNode(Tag tag, Mark startMark, Mark endMark, Boolean flowStyle) {
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/env/EnvScalarConstructor.java:45: error: bad use of '>'
   * name must be a word -> \w+ value can be any non-space -> \S+
                          ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/env/EnvScalarConstructor.java:45: error: bad use of '>'
   * name must be a word -> \w+ value can be any non-space -> \S+
                                                            ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/events/CollectionStartEvent.java:60: warning: no @param for anchor
  public CollectionStartEvent(String anchor, String tag, boolean implicit, Mark startMark,
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/events/CollectionStartEvent.java:60: warning: no @param for tag
  public CollectionStartEvent(String anchor, String tag, boolean implicit, Mark startMark,
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/events/CollectionStartEvent.java:60: warning: no @param for implicit
  public CollectionStartEvent(String anchor, String tag, boolean implicit, Mark startMark,
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/events/CollectionStartEvent.java:60: warning: no @param for startMark
  public CollectionStartEvent(String anchor, String tag, boolean implicit, Mark startMark,
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/events/CollectionStartEvent.java:60: warning: no @param for endMark
  public CollectionStartEvent(String anchor, String tag, boolean implicit, Mark startMark,
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/events/CollectionStartEvent.java:60: warning: no @param for flowStyle
  public CollectionStartEvent(String anchor, String tag, boolean implicit, Mark startMark,
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/scanner/ScannerImpl.java:248: warning: no @return
  public ScannerImpl setParseComments(boolean parseComments) {
                     ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/scanner/ScannerImpl.java:222: warning: no description for @param
   * @param reader
     ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/tokens/DirectiveToken.java:23: warning: no description for @param
 * @param <T>
   ^

Command line was: /Library/Java/JavaVirtualMachines/jdk1.8.0_221.jdk/Contents/Home/jre/../bin/javadoc @options @packages

Refer to the generated Javadoc files in '/Users/oss/workspace/snakeyaml1-fnma/target/apidocs' dir.

org.apache.maven.reporting.MavenReportException:
Exit code: 1 - /Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/DumperOptions.java:146: warning: no @param for flowStyle
    public static FlowStyle fromBoolean(Boolean flowStyle) {
                            ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/DumperOptions.java:146: warning: no @return
    public static FlowStyle fromBoolean(Boolean flowStyle) {
                            ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/nodes/CollectionNode.java:49: warning: no @param for tag
  public CollectionNode(Tag tag, Mark startMark, Mark endMark, Boolean flowStyle) {
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/nodes/CollectionNode.java:49: warning: no @param for startMark
  public CollectionNode(Tag tag, Mark startMark, Mark endMark, Boolean flowStyle) {
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/nodes/CollectionNode.java:49: warning: no @param for endMark
  public CollectionNode(Tag tag, Mark startMark, Mark endMark, Boolean flowStyle) {
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/nodes/CollectionNode.java:49: warning: no @param for flowStyle
  public CollectionNode(Tag tag, Mark startMark, Mark endMark, Boolean flowStyle) {
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/env/EnvScalarConstructor.java:45: error: bad use of '>'
   * name must be a word -> \w+ value can be any non-space -> \S+
                          ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/env/EnvScalarConstructor.java:45: error: bad use of '>'
   * name must be a word -> \w+ value can be any non-space -> \S+
                                                            ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/events/CollectionStartEvent.java:60: warning: no @param for anchor
  public CollectionStartEvent(String anchor, String tag, boolean implicit, Mark startMark,
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/events/CollectionStartEvent.java:60: warning: no @param for tag
  public CollectionStartEvent(String anchor, String tag, boolean implicit, Mark startMark,
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/events/CollectionStartEvent.java:60: warning: no @param for implicit
  public CollectionStartEvent(String anchor, String tag, boolean implicit, Mark startMark,
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/events/CollectionStartEvent.java:60: warning: no @param for startMark
  public CollectionStartEvent(String anchor, String tag, boolean implicit, Mark startMark,
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/events/CollectionStartEvent.java:60: warning: no @param for endMark
  public CollectionStartEvent(String anchor, String tag, boolean implicit, Mark startMark,
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/events/CollectionStartEvent.java:60: warning: no @param for flowStyle
  public CollectionStartEvent(String anchor, String tag, boolean implicit, Mark startMark,
         ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/scanner/ScannerImpl.java:248: warning: no @return
  public ScannerImpl setParseComments(boolean parseComments) {
                     ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/scanner/ScannerImpl.java:222: warning: no description for @param
   * @param reader
     ^
/Users/oss/workspace/snakeyaml1-fnma/src/main/java/org/yaml/snakeyaml/tokens/DirectiveToken.java:23: warning: no description for @param
 * @param <T>
   ^

Command line was: /Library/Java/JavaVirtualMachines/jdk1.8.0_221.jdk/Contents/Home/jre/../bin/javadoc @options @packages

Refer to the generated Javadoc files in '/Users/oss/workspace/snakeyaml1-fnma/target/apidocs' dir.

    at org.apache.maven.plugins.javadoc.AbstractJavadocMojo.doExecuteJavadocCommandLine (AbstractJavadocMojo.java:6092)
    at org.apache.maven.plugins.javadoc.AbstractJavadocMojo.executeJavadocCommandLine (AbstractJavadocMojo.java:5968)
    at org.apache.maven.plugins.javadoc.AbstractJavadocMojo.executeReport (AbstractJavadocMojo.java:2277)
    at org.apache.maven.plugins.javadoc.JavadocJar.doExecute (JavadocJar.java:189)
    at org.apache.maven.plugins.javadoc.AbstractJavadocMojo.execute (AbstractJavadocMojo.java:2034)
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:137)

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.