Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/go-playground/overalls
Package overalls takes multi-package go projects, runs test coverage tests on all packages in each directory and finally concatenates into a single file for tools like goveralls and codecov.io.
overalls -project=github.com/go-playground/overalls -covermode=count -debug
goveralls -coverprofile=overalls.coverprofile -service semaphore -repotoken $COVERALLS_TOKEN
mv overalls.coverprofile coverage.txt
export CODECOV_TOKEN=###
bash <(curl -s https://codecov.io/bash)
goveralls and codecover currently do not calculate coverage the same way as go tool cover
see here and here.
overalls (and go test) by default will not calculate coverage "across" packages. E.g. if a test in package A covers code in package B overalls will not count it. You may or may not want this depending on whether you're more concerned about unit test coverage or integration test coverage. To enable add the coverpkg flag.
overalls -project=github.com/go-playground/overalls -covermode=count -debug -- -coverpkg=./...
$ overalls -help
usage: overalls -project=[path] -covermode[mode] OPTIONS -- TESTOPTIONS
overalls recursively traverses your projects directory structure
running 'go test -covermode=count -coverprofile=profile.coverprofile'
in each directory with go test files, concatenates them into one
coverprofile in your root directory named 'overalls.coverprofile'
OPTIONS
-project
Your project path as an absolute path or relative to the '$GOPATH/src' directory
example: -project=github.com/go-playground/overalls
-covermode
Mode to run when testing files.
default:count
OPTIONAL
-ignore
A comma separated list of directory names to ignore, relative to project path.
example: -ignore=[.git,.hiddentdir...]
default: '.git'
-debug
A flag indicating whether to print debug messages.
example: -debug
default:false
-concurrency
Limit the number of packages being processed at one time.
The minimum value must be 2 or more when set.
example: -concurrency=5
default: unlimited
TESTOPTIONS
Any flags after --
will be passed as-is to go test
.
For example:
overalls -project=$PROJECT -debug -- -race -v
Will call go test -race -v
under the hood in addition to the -coverprofile
commands.
Make a pull request.
If the changes being proposed or requested are breaking changes, please create an issue.
Distributed under MIT License, please see license file in code for more details.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.