
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
@10up/cypress-wp-utils
Advanced tools
Utilities library for WordPress E2E testing in the Cypress environment.
This library requires Cypress. Use @10up/cypress-wp-setup to set up Cypress automatically, including this library. If running tests against WordPress 6.3, you'll probably need to set chromeWebSecurity: false in your Cypress config file. This allows Cypress to properly interact with the iframed Block Editor.
npm install @10up/cypress-wp-utils --save-dev
Import the libary in support/index.js file:
// tests/cypress/support/index.js
import '@10up/cypress-wp-utils';
Documentation for commands can be found at https://10up.github.io/cypress-wp-utils/.
Add a tsconfig.json file into the cypress folder to enable code completion for both Cypress built-in commands and commands from this library:
{
"compilerOptions": {
"allowJs": true,
"types": ["cypress"]
},
"include": ["**/*.*"]
}
This project uses hygen to scaffold new commands to reduce the effort of manually importing and registering new commands:
$ npx hygen cypress-command new customCommand
Loaded templates: _templates
added: src/commands/custom-command.ts
inject: src/index.ts
inject: src/index.ts
inject: src/index.ts
npm i -D path/to/the/library
Every incoming pull request will automatically run tests against:
To run tests locally against every WordPress major release since minimum support (5.7) to the latest nightly build (e.g., 6.4-alpha) use this script:
./run-all-cores.sh
It has optional parameter -s to specify only one test suite to run:
./run-all-cores.sh -s tests/cypress/intergation/login.test.js
Please read CODE_OF_CONDUCT.md for details on our code of conduct, CONTRIBUTING.md for details on the process for submitting pull requests to us, and CREDITS.md for a list of maintainers, contributors, and libraries used in this repository.
Beta: This project is quite new and we're not sure what our ongoing support level for this will be. Bug reports, feature requests, questions, and pull requests are welcome. If you like this project please let us know, but be cautious using this in a Production environment!
[0.6.0] - 2025-04-15
createPost command works properly when used to create pages on WordPress 6.8 (props @dkotter, @jeffpaul, @iamdharmesh via #136).insertBlock command works properly for blocks with multiple slashes, like block variations (props @dkotter, @iamdharmesh via #137).FAQs
Cypress command utilities for testing WordPress
The npm package @10up/cypress-wp-utils receives a total of 620 weekly downloads. As such, @10up/cypress-wp-utils popularity was classified as not popular.
We found that @10up/cypress-wp-utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.