
Security News
/Research
node-ipc npm Package Compromised in Supply Chain Attack
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
@btc-vision/as-covers-assembly
Advanced tools
Code coverage for AssemblyScript projects that uses a few simple packages to make visualizing how well your code branches are covered.
First install from npm.
npm install @btc-vision/core
Next, add the following transform and entry point to your AssemblyScript compilation.
# uses multiple lines for clarity
asc node_modules/@btc-vision/as-covers-assembly/index.ts
--transform @btc-vision/as-covers-transform/lib/index.js
--explicitStart
These will inject some immutable cover points into your web assembly binary.
The next step is to instantiate the module:
import { Covers } from "@btc-vision/as-covers-glue";
import * as fs from "fs";
import { instantiate } from "@btc-vision/as-loader";
// import your web assembly binary
const binary = fs.readFileSync("build/untouched.wasm");
const covers = new Covers();
// Install your imports here
const imports = covers.installImports({});
(async function() {
const loader = await instantiate(binary, imports);
covers.registerLoader(loader);
loader.exports._start();
process.stdout.write(covers.stringify());
}());
Covers is designed to work over multiple binary compilations with the transform applied. Each cover point is immutably hashed so that you can test code coverage with different test files.
Just remember to register the loader each time before calling the _start() method.
MIT License
Copyright (c) 2021 Joshua Tenner <tenner.joshua@gmail.com>
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
FAQs
AssemblyScript code coverage for as-covers
The npm package @btc-vision/as-covers-assembly receives a total of 70 weekly downloads. As such, @btc-vision/as-covers-assembly popularity was classified as not popular.
We found that @btc-vision/as-covers-assembly demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.