
Research
/Security News
Popular Tinycolor npm Package Compromised in Supply Chain Attack Affecting 40+ Packages
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
@saucelabs/saucewright
Advanced tools
CLI for dynamically configuring saucectl via playwright config files.
CLI for dynamically configuring saucectl via playwright config files.
This project is a proof of concept and as such does not represent a fully finished product.
Do NOT use this in production.
All the warnings out of the way, how does it work? saucewright
inspects your local playwright.config.js/ts file
and generates a config.yml file that saucectl understands, which it then invokes with. All this happens in one step.
This is very convenient for running adhoc tests, especially where saucectl is not yet configured. The general idea is
that saucewright
mimics (in terms of flags/args) the playwright CLI almost 1:1, so that the user has the least amount
of friction getting started with playwright on Sauce Labs.
We are actively looking for feedback and would love to hear from you!
This list is not exhaustive, but gives you an idea of what's still missing/possible.
1.27.1
)npx saucewright test -h
to see what's implemented)Usage: saucewright test [options] [test-filter...]
Arguments:
test-filter Pass arguments to filter test files. Each argument is treated as a regular expression.
Options:
--browser <browser> Browser to use for tests, one of "all", "chromium", "firefox" or "webkit" (default: "chromium").
--headed Run tests in headed browsers (default: headless).
-g, --grep <grep> Only run tests matching this regular expression (default: ".*").
-gv, --grep-invert <grep> Only run tests that do not match this regular expression.
--project <project-name...> Only run tests from the specified list of projects (default: run all projects).
-h, --help display help for command
Execute the following commands in your playwright project.
npm i @saucelabs/saucewright
Since saucewright
requires saucectl
:
npm i -g saucectl
npx saucewright test
FAQs
CLI for dynamically configuring saucectl via playwright config files.
We found that @saucelabs/saucewright demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 26 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
Security News
pnpm's new minimumReleaseAge setting delays package updates to prevent supply chain attacks, with other tools like Taze and NCU following suit.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.