David Biesack

Add help for validating new _extensions

1

http://api.specificationtoolbox.com/extensions/ describes how to add new extensions using the APIs.json format, but it is not clear how one can validate that the `_extensions/*.md` files in a pull request to this...

False positive for missing maxLength for format: date

4

When a property has ``` type: string format: date ``` we get a false positive ``` error owasp:api4:2019-string-limit Schema of type string must specify maxLength, enum, or const. ``` ##...

JSON Schema 2020-12 (used in OAS 3.1) defines a new keyword, `unevaluatedProperties` which is like `additionalProperties` but works better when using JSON Schema composition with `allOf`. For this feature, extend...

If an OpenAPI document has a schema with a `responses` property, this ruleset appears to treat it as an operation `responses` object and applies several oawap `responses` rules to it,...

Consider `oauth2` or `openIdConnect` authentication over HTTP `basic` auth

1

Thank you for offering a new example for OpenAPI! It is widely understood that APIs should avoid HTTP Basic Auth, which is inherently insecure. I recommend revising the Museum OpenAPI...

Fixes #1402: clarify `readOnly` applies to any value, not just properties

2

clarify that `readOnly` applies to any value, not just properties. Re-format `true` and `false` code values Resolves #1402

Add JSON schema for ambassadors.json

6

**Work Summary**: I suggest this repository include a JSON Schema next to the `programs/ambassadors/ambassadors.json` file (such as`programs/ambassadors/ambassadors-schema.json` ). When adding a submission, I was not sure what values I can...

build fails in "npm i" - tsc errors: 'err' is of type 'unknown'.

2

I cloned this repo and tried to build locally (to try to debug/fix an issue I reported). The `npm i` command failed in `tsc` ```text $ npm i > [email protected]...

Fixes #244 - try parsing as JSON if filename is a named pipe/fifo

1

Also fixes issue #245

validation not working (invalid data accepted) when a schema is defined using shell process substitution/named pipes

1

The bash shell has a feature called _process substitution_ (details below) which allows creating _named pipes_. `ajv` (CLI) does not appear to work well with such named pipes ```bash $...