
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@skills17/stryker-helpers
Advanced tools
Provides Stryker helpers for usage in a skills competition environment.
This package provides Stryker helpers for usage in a skills competition environment. It includes:
Requirements:
18
or greaterTo install this package, run the following command:
npm install @skills17/stryker-helpers
It is suggested to add the following npm scripts:
"scripts": {
"test": "skills17-stryker run",
"test:json": "skills17-stryker run --json"
},
This will provide the following commands:
npm test
- Run all tests once and show a nice output with the awarded points (useful for the competitors to see
their points)npm run test:json
- Run all tests once and get a json output (useful for automated marking scripts)Points can be awarded for coverage of conditionals and deductions for number of mutants survived. If any test fails in normal execution, no points will be awarded.
A config.yaml
file needs to be created that contains some information about the task. It should be placed in the root
folder of your task, next to the package.json
file.
See the @skills17/task-config
package for a detailed
description of all available properties in the config.yaml
file.
As seen in the installation instructions, the skills17-stryker
command is available.
It is a thin wrapper around the stryker run
command.
All arguments to the command will be forwarded to stryker
so Stryker can be used exactly the same way if this package
wouldn't be installed.
Additionally, the following new arguments are available:
--json
output the test result with scored points in json to standard outThe generated test names are in the following format:
[file key]-[mutant name]
The file key is the file name being tested with the extension and src/
removed. Path separators are replace with .
.
If multiple mutants with the same name are generated, any surviving mutant will make the test fail.
With skills17/stryker-helpers
there are no extra tests needed.
FAQs
Provides Stryker helpers for usage in a skills competition environment.
The npm package @skills17/stryker-helpers receives a total of 0 weekly downloads. As such, @skills17/stryker-helpers popularity was classified as not popular.
We found that @skills17/stryker-helpers demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.