Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@hishprorg/corporis-eius
Advanced tools
[![Build Status](https://travis-ci.org/godaddy/@hishprorg/corporis-eius.svg?branch=master)](https://travis-ci.org/godaddy/@hishprorg/corporis-eius) [![npm version](https://badge.fury.io/js/@hishprorg/corporis-eius.svg)](https://www.npmjs.com/package/@hish
The @hishprorg/corporis-eius API is a solution for asserting web UI or API performance during functional/integration tests! The simple idea is that you inject some javascript into the headless browser that you use for UI testing (i.e. webdriver) to collect navigation timing which can then be stored in elasticsearch. In subsequent runs of your tests, the new performance data can be compared to historical results (the 'baseline') and asserted like any other assertion that you may perform in your tests. For API tests, you can set start/stop timers and store the delta in elasticsearch and follow the same routine to assert.
Run this API in your local network => install one of the clients on your dev/test machine => add a few lines of code => assert perf against historical baselines & visualize historical data!
This version of the Timings API introduces a few major updates and you should carefully read the following announcements!
If you have used this repo/product before or if you are a current user, you may face a few challenges and/or breaking changes! Make sure you pay close attention when updating to a new version of Elasticsearch!
< 7.x
, the API will work but no data will be written to Elasticsearch.json
format
.js
and .yml|.yaml
formats - that is no longer the case.json
format!For other changes, please see the CHANGELOG
The
--configfile
argument is no longer supported If you are currently using the--configfile
argument to start your @hishprorg/corporis-eius API server, you have to replace it with aCONFIGFILE
environment variable! For more info and updated startup commands, see here
It is highly recommended that you run this product in a Docker environment using the @hishprorg/corporis-eius-docker repo. This repo provides a convenient way to run the @hishprorg/corporis-eius API as well as the currently supported Elastic Stack.
If you do (or have to) run the API stand-alone and/or run your own Elastic stack, the recommended versions are:
again, if you're updating your Elasticsearch data, you can use the upgrade steps outlined here: @hishprorg/corporis-eius-docker -> UPDATING.md
You can find extended documentation for the @hishprorg/corporis-eius API here: USAGE.md
The @hishprorg/corporis-eius API can be run "stand-alone" as a node/express application, with or without Elasticsearch for data storage:
FAQs
[![Build Status](https://travis-ci.org/godaddy/@hishprorg/corporis-eius.svg?branch=master)](https://travis-ci.org/godaddy/@hishprorg/corporis-eius) [![npm version](https://badge.fury.io/js/@hishprorg/corporis-eius.svg)](https://www.npmjs.com/package/@hish
We found that @hishprorg/corporis-eius demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.