
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
github.com/privafy/goconvey
Welcome to GoConvey, a yummy Go testing tool for gophers. Works with go test
. Use it in the terminal or browser according to your viewing pleasure. View full feature tour.
Features:
go test
You can ask questions about how to use GoConvey on StackOverflow. Use the tags go
and goconvey
.
Menu:
$ go get github.com/privafy/goconvey
Make a test, for example:
package package_name
import (
"testing"
. "github.com/privafy/goconvey/convey"
)
func TestSpec(t *testing.T) {
// Only pass t into top-level Convey calls
Convey("Given some integer with a starting value", t, func() {
x := 1
Convey("When the integer is incremented", func() {
x++
Convey("The value should be greater by one", func() {
So(x, ShouldEqual, 2)
})
})
})
}
Start up the GoConvey web server at your project's path:
$ $GOPATH/bin/goconvey
Then watch the test results display in your browser at:
http://localhost:8080
If the browser doesn't open automatically, please click http://localhost:8080 to open manually.
There you have it.
As long as GoConvey is running, test results will automatically update in your browser window.
The design is responsive, so you can squish the browser real tight if you need to put it beside your code.
The web UI supports traditional Go tests, so use it even if you're not using GoConvey tests.
Just do what you do best:
$ go test
Or if you want the output to include the story:
$ go test -v
Check out the
For web UI and terminal screenshots, check out the full feature tour.
GoConvey is brought to you, originally by SmartyStreets, Privafy andseveral contributors (Thanks!).
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.