
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@gasket/plugin-mocha
Advanced tools
Integrates mocha based testing in to your Gasket application
Creates a mocha
, nyc
, sinon
, chai
based testing environment for your
Gasket application.
This plugin is only used by presets for create-gasket-app
and is not installed for apps.
When you create a new gasket application that is configured with the mocha
plugin it will prepare it with a mocha
based testing environment. It will add
the following scripts
to the package.json
:
npm test
, Runs the .test.js
files in your test
folder and generates
coverage information of each of the files you test.npm run test:runner
Same as npm test
, but without coverage information.npm run test:watch
Same as npm run test:runner
but now watches your tests
and automatically re-runs the tests when changes are detected.The following test utilities are included:
chai
Installed as default assertion framework using the expect
syntax.sinon
Create spies, stubs and mocks.enzyme
Easier to assert, manipulate, and traverse your React Components.The tests are automatically processed with babel using the .babelrc
that is in
the root of your application. We've also configured enzyme
for the latest
support React, and prepared the test environment with jsdom
so you can use the
mount
functionality of enzyme
.
FAQs
Integrates mocha based testing in to your Gasket application
The npm package @gasket/plugin-mocha receives a total of 236 weekly downloads. As such, @gasket/plugin-mocha popularity was classified as not popular.
We found that @gasket/plugin-mocha demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.