Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
@patternfly/patternfly-a11y
Advanced tools
This is a CLI tool developed for patternfly-react, patternfly-next, and patternfly-org to run axe in Selenium on a list of urls. It has options suited to our needs but should work as an integration test for any project.
It outputs a coverage directory with:
patternfly-a11y [command]
Commands:
patternfly-a11y --file <file> Audit a list of URLs in JSON file
Options:
--version Show version number [boolean]
--file, -f JSON file of URLs to audit [string]
--prefix, -p Prefix for all URLs [string] [default: ""]
--crawl, -c Whether to crawl URLs for more URLs
[boolean] [default: false]
--aggregate, -a Whether to aggregate tests by component in XML
report [boolean] [default: false]
--ignore, -i Comma-seperated list of errors to ignore by id
[string] [default: ""]
--skip, -s Regex of pages to skip [string] [default: ""]
--ignoreIncomplete, --iI Whether to ignore incomplete errors
[boolean] [default: false]
--help Show help [boolean]
npm i @patternfly/patternfly-a11y
then
node_modules/.bin/patternfly-a11y --file [json-list-of-urls]
OR
node_modules/.bin/patternfly-a11y --prefix http://localhost:9000 --crawl /dashboard
Currently this tool is rough around the edges. It could be extended to run tests in parallel or on browserstack, do better reporting, allow a plugable version of axe-core, have better error handling (browser tests are always finnicky...), more report formats, you get the idea.
PRs welcome. The author @redallen would love to spend more time on this.
FAQs
Accessibility utilities for PatternFly.
The npm package @patternfly/patternfly-a11y receives a total of 313 weekly downloads. As such, @patternfly/patternfly-a11y popularity was classified as not popular.
We found that @patternfly/patternfly-a11y demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.