
Research
/Security News
CanisterWorm: npm Publisher Compromise Deploys Backdoor Across 29+ Packages
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.
@flakiness/sdk
Advanced tools
Comprehensive SDK for creating and managing Flakiness JSON Reports in Node.js
The Flakiness SDK provides a comprehensive set of tools for creating and managing Flakiness JSON Reports in Node.js.
npm i @flakiness/sdk @flakiness/flakiness-report
Here's a minimal example of creating a Flakiness JSON Report:
import { FlakinessReport } from '@flakiness/flakiness-report';
import {
GitWorktree,
ReportUtils,
writeReport,
uploadReport,
CIUtils
} from '@flakiness/sdk';
// Initialize git worktree and environment
const worktree = GitWorktree.create(process.cwd());
const env = ReportUtils.createEnvironment({ name: 'CI' });
// Create a simple test report
const report: FlakinessReport.Report = {
category: 'testreport',
commitId: worktree.headCommitId(),
url: CIUtils.runUrl(),
environments: [env],
suites: [{
title: 'My Test Suite',
type: 'describe',
tests: [{
title: 'My Test',
location: { file: 'test.spec.ts', line: 10, column: 1 },
attempts: [{
environmentIdx: 0,
status: 'passed',
expectedStatus: 'passed',
duration: 100 as FlakinessReport.DurationMS,
}],
}],
}],
startTimestamp: Date.now() as FlakinessReport.UnixTimestampMS,
duration: 100 as FlakinessReport.DurationMS,
};
// Write report to disk or upload to Flakiness.io
await writeReport(report, [], './flakiness-report');
// Or: await uploadReport(report, [], { flakinessAccessToken: 'your-token' });
The SDK provides two entry points:
@flakiness/sdkThe main entry point for Node.js environments. Provides full access to all SDK functionality including:
@flakiness/sdk/browserA browser-compatible entry point with a subset of utilities that work in browser environments. Exports:
ReportUtils - Browser-safe utilities (normalizeReport, stripAnsi, visitTests)Use this entry point when you need to process or manipulate reports in browser-based tools or web applications.
CIUtils - Utilities to extract CI/CD information (run URLs, environment detection)GitWorktree - Git repository utilities for path conversion and commit informationReportUtils - Namespace with utilities for report creation and manipulation:
createEnvironment() - Create environment objects with system informationnormalizeReport() - Deduplicate environments, suites, and testscollectSources() - Extract source code snippets for locations in the reportstripAnsi() - Remove ANSI escape codes from stringsvisitTests() - Recursively visit all tests in a reportcreateFileAttachment() / createDataAttachment() - Create report attachmentsCPUUtilization - Track CPU utilization over time via periodic samplingRAMUtilization - Track RAM utilization over time via periodic samplingreadReport() - Read a Flakiness report and its attachments from diskshowReport() - Start a local server and open the report in your browseruploadReport() - Upload reports and attachments to Flakiness.iowriteReport() - Write reports to disk in the standard Flakiness report formatFlakinessProjectConfig - Manage project configuration stored in .flakiness/config.jsonFAQs
Comprehensive SDK for creating and managing Flakiness JSON Reports in Node.js
The npm package @flakiness/sdk receives a total of 657 weekly downloads. As such, @flakiness/sdk popularity was classified as not popular.
We found that @flakiness/sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.

Research
/Security News
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

Security News
ENISA’s new package manager advisory outlines the dependency security practices companies will need to demonstrate as the EU’s Cyber Resilience Act begins enforcing software supply chain requirements.