
Security News
The Next Open Source Security Race: Triage at Machine Speed
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.
@metamask/test-dapp
Advanced tools
This is a simple test dapp for use in MetaMask e2e tests and manual QA.
Currently hosted here.
If you wish to use this dapp in your e2e tests, install this package and set up a script of e.g. the following form:
static-server node_modules/@metamask/test-dapp/dist --port 9011
The main page of the test dapp includes a simple UI featuring buttons for common dapp interactions.
There is a second page (request.html) that allows making requests directly to the provider using query parameters. This provides a simple way of testing RPC methods using an in-page provider.
It can be used by navigating to /request.html?method=${METHOD}¶ms=${PARAMS} (e.g. /request.html?method=eth_getLogs¶ms=[{ "address": "0x0000000000000000000000000000000000000000" }]). The page will make a request with the given RPC method and parameters using ethereum.request, and report the result as plain text.
nvm use will automatically choose the right node version for you.yarn setup to install dependencies and run any required post-install scripts
yarn / yarn install command directly. Use yarn setup instead. The normal install command will skip required post-install scripts, leaving your development environment in an invalid state.Run yarn lint to run the linter, or run yarn lint:fix to run the linter and fix any automatically fixable issues.
This package has no tests.
After merging or pushing to main, please run yarn deploy in the package root directory if the contents of the dist/ directory have changed.
All HTML elements should be easily selectable by XPath. This means that appearances can be misleading. For example, consider this old bug:
<button
class="btn btn-primary btn-lg btn-block mb-3"
id="approveTokensWithoutGas"
disabled
>
Approve Tokens Without Gas
</button>
This appears on the page as Approve Tokens Without Gas. In reality, the value included the whitespace on the second line, and caused XPath queries for the intended value to fail.
FAQs
A simple dapp used in MetaMask e2e tests.
We found that @metamask/test-dapp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.

Security News
gem.coop is testing registry-level dependency cooldowns to limit exposure during the brief window when malicious gems are most likely to spread.