Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
github.com/jacobsa/oglematchers
oglematchers
is a package for the Go programming language containing a set of
matchers, useful in a testing or mocking framework, inspired by and mostly
compatible with Google Test for C++ and
Google JS Test. The package is used by the
ogletest testing framework and oglemock mocking
framework, which may be more directly useful to you, but can be generically used
elsewhere as well.
A "matcher" is simply an object with a Matches
method defining a set of golang
values matched by the matcher, and a Description
method describing that set.
For example, here are some matchers:
// Numbers
Equals(17.13)
LessThan(19)
// Strings
Equals("taco")
HasSubstr("burrito")
MatchesRegex("t.*o")
// Combining matchers
AnyOf(LessThan(17), GreaterThan(19))
There are lots more; see here for a reference. You can also add
your own simply by implementing the oglematchers.Matcher
interface.
First, make sure you have installed Go 1.0.2 or newer. See here for instructions.
Use the following command to install oglematchers
and keep it up to date:
go get -u github.com/jacobsa/oglematchers
See here for documentation. Alternatively, you can install the
package and then use godoc
:
godoc github.com/jacobsa/oglematchers
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.