Security News
Research
Supply Chain Attack on Rspack npm Packages Injects Cryptojacking Malware
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
@aicore/cocodb-ws-client
Advanced tools
WebSocket client for cocoDb. This will client can pipeline the requests to increase through put connection
repository
> settings
> and uncheck Allow merge commits
. this is usually automatically done by code guardian bots in core.ai org. so you may just need to verify it.Administration Analysis Method
for the first time before a pull request is raised: id=aicore_template-nodejs-ts
to the sonar id of your project fields. see this PR: https://github.com/aicore/libcache/pull/13Since this is a pure JS template project, build command just runs test with coverage.
> npm install // do this only once.
> npm run build
To lint the files in the project, run the following command:
> npm run lint
To Automatically fix lint errors:
> npm run lint:fix
To run all tests:
> npm run test
Hello world Tests
✔ should return Hello World
#indexOf()
✔ should return -1 when the value is not present
Additionally, to run unit/integration tests only, use the commands:
> npm run test:unit
> npm run test:integ
To run all tests with coverage:
> npm run cover
Hello world Tests
✔ should return Hello World
#indexOf()
✔ should return -1 when the value is not present
2 passing (6ms)
----------|---------|----------|---------|---------|-------------------
File | % Stmts | % Branch | % Funcs | % Lines | Uncovered Line #s
----------|---------|----------|---------|---------|-------------------
All files | 100 | 100 | 100 | 100 |
index.js | 100 | 100 | 100 | 100 |
----------|---------|----------|---------|---------|-------------------
=============================== Coverage summary ===============================
Statements : 100% ( 5/5 )
Branches : 100% ( 2/2 )
Functions : 100% ( 1/1 )
Lines : 100% ( 5/5 )
================================================================================
Detailed unit test coverage report: file:///template-nodejs/coverage-unit/index.html
Detailed integration test coverage report: file:///template-nodejs/coverage-integration/index.html
After running coverage, detailed reports can be found in the coverage folder listed in the output of coverage command. Open the file in browser to view detailed reports.
To run unit/integration tests only with coverage
> npm run cover:unit
> npm run cover:integ
Sample coverage report:
Unit and integration test coverage settings can be updated by configs .nycrc.unit.json
and .nycrc.integration.json
.
See https://github.com/istanbuljs/nyc for config options.
Please run npm run release
on the main
branch and push the changes to main. The release command will bump the npm version.
!NB: NPM publish will faill if there is another release with the same version.
To publish a package to npm, push contents to npm
branch in
this repository.
@aicore/package*
If you are looking to publish to package owned by core.ai, you will need access to the GitHub Organization secret NPM_TOKEN
.
For repos managed by aicore org in GitHub, Please contact your Admin to get access to core.ai's NPM tokens.
Alternatively, if you want to publish the package to your own npm account, please follow these docs:
To edit the publishing workflow, please see file: .github/workflows/npm-publish.yml
We use Rennovate for dependency updates: https://blog.logrocket.com/renovate-dependency-updates-on-steroids/
Several automated workflows that check code integrity are integrated into this template. These include:
.sonarcloud.properties
Administration Analysis Method
for the first time SonarLint is currently available as a free plugin for jetbrains, eclipse, vscode and visual studio IDEs. Use sonarLint plugin for webstorm or any of the available IDEs from this link before raising a pull request: https://www.sonarlint.org/ .
SonarLint static code analysis checker is not yet available as a Brackets extension.
See https://mochajs.org/#getting-started on how to write tests Use chai for BDD style assertions (expect, should etc..). See move here: https://www.chaijs.com/guide/styles/#expect
Since it is not that straight forward to mock es6 module imports, use the follow pull request as reference to mock imported libs:
setup-mocks.js
as the first import of all files in tests.if you want to mock/spy on fn() for unit tests, use sinon. refer docs: https://sinonjs.org/
we use c8 for coverage https://github.com/bcoe/c8. Its reporting is based on nyc, so detailed docs can be found here: https://github.com/istanbuljs/nyc ; We didn't use nyc as it do not yet have ES module support see: https://github.com/digitalbazaar/bedrock-test/issues/16 . c8 is drop replacement for nyc coverage reporting tool
FAQs
Websocket client for cocoDb
The npm package @aicore/cocodb-ws-client receives a total of 96 weekly downloads. As such, @aicore/cocodb-ws-client popularity was classified as not popular.
We found that @aicore/cocodb-ws-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.
Security News
Sonar’s acquisition of Tidelift highlights a growing industry shift toward sustainable open source funding, addressing maintainer burnout and critical software dependencies.