Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
org.amshove.kluent:kluent-android
Advanced tools
Kluent is a "Fluent Assertions" library written specifically for Kotlin.
It uses the Infix-Notations and Extension Functions of Kotlin to provide a fluent wrapper around the JUnit-Assertions.
Kluent is hosted here at mavenCentral
Kluent-Android is hosted here at mavenCentral
Replace {version} with the current version and chose one of the two artifacts, based on your target platform:
// Add jcenter as a repository for dependencies
repositories {
mavenCentral()
}
dependencies {
// for JVM:
testImplementation 'org.amshove.kluent:kluent:{version}'
// for Android:
testImplementation 'org.amshove.kluent:kluent-android:{version}'
// To get JUnit errors from kotlin.test, to e.g. enable diff windows in failure messages
testImplementation "org.jetbrains.kotlin:kotlin-test-junit:$kotlin_version"
}
Replace {version} with the current version
<dependency>
<groupId>org.amshove.kluent</groupId>
<artifactId>kluent</artifactId>
<version>{version}</version>
<type>pom</type>
</dependency>
More examples can be seen on the Site or in the tests.
"hello" shouldBeEqualTo "hello"
"hello" shouldNotBeEqualTo "world"
val alice = Person("Alice", "Bob")
val jon = Person("Jon", "Doe")
val list = listOf(alice, jon)
list shouldContain jon
Every method that is included in Kluent also has a "backtick version", to make it feel more like a describing sentence.
Some examples:
"hello" `should be equal to` "hello"
"hello" `should not be equal to` "world"
All projects of Kluent are built with Gradle
The default gradlew build
will only build the common
and jvm
module, to keep the build times as small as possible.
If you plan to submit a pull request, it is also fine if you just make sure it builds and tests against common
and jvm
(which gradlew build
will make sure of), because the rest of the heavy work will be done by Travis and
AppVeyor. That way you can keep your machine free from NodeJS and Kotlin Native :-)
To build the Android library, pass the parameter ANDROID
to Gradle. This will build the common
and android
artifacts. To pass the parameter, type:
gradlew build -PANDROID
To also build the JS module, pass JS
:
gradlew build -PJS
To build native, pass:
gradlew build -PNATIVE
In these cases, the JVM module will also be built, because it is our primary target and everything should pass on the
JVM. To skip the JVM build, e.g. for testing only against Native or JS, pass SKIPVM
:
gradlew build -PJS -PNATIVE -PSKIPJVM
This command will build common
, js
, native
, but not jvm
.
If you plan to add a feature (e.g. an Assertion), it would be nice to first try adding it to the common
module, as it
would then be available to all platforms. If it uses specific APIs, like classes from the Java standard library, then it
needs to go to the jvm
module.
If you're unsure where to put a feature, or if you want to put something in the common
module which needs platform
specific implementations, you can have a
look here (platformIsDigit
or platformClassName
)
where a function in the common
module calls a so called expect
function, which is
defined here
in the common
module and has
specific JVM
,
JS
and Native
implementation.
If you're still unsure how to make something platform independent, we can have a look together inside the PR :-)
Parts of the assertSoftly
feature are based
upon the great work of Kotest under the Apache 2.0 License.
FAQs
Unknown package
We found that org.amshove.kluent:kluent-android demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.