Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@stryker-mutator/core
Advanced tools
Professor X: For someone who hates mutants... you certainly keep some strange company. William Stryker: Oh, they serve their purpose... as long as they can be controlled.
For an introduction to mutation testing and StrykerJS features, see stryker-mutator.io.
Please follow the quickstart on the website.
For small js projects, you can try the following command:
npm install --save-dev @stryker-mutator/core
# Only for small projects:
npx stryker run
It will run stryker with default values:
npm test
as your test commandlib
and src
directories$ npx stryker <command> [options] [configFile]
See usage on stryker-mutator.io
See our website for the list of currently supported mutators.
See configuration on stryker-mutator.io.
Stryker can also be used programmatically from nodejs. It exports 2 classes for you to use: Stryker
and StrykerCli
.
import { Stryker, StrykerCli } from '@stryker-mutator/core';
Both classes can be used to run Stryker. The main difference is that Stryker
is a slightly more low-level approach, while StrykerCli
is the straight up CLI api.
In this example you can see how to use both.
async function main() {
// Runs Stryker as if it was called directly from the cli. Not even returns a promise, it assumes to be allowed to call `process.exit`.
new StrykerCli(process.argv /* RAW argv array */ ).run();
// Runs Stryker, will not assume to be allowed to exit the process.
const stryker = new Stryker({ concurrency: 4 } /* Partial Stryker options object */ );
const mutantResults = await stryker.runMutationTest();
// mutantResults or rejected with an error.
}
Stryker is written in TypeScript, so it is recommended to use Stryker as well to get the best developer experience.
6.1.2 (2022-06-28)
Note: Version bump only for package stryker-parent
FAQs
The extendable JavaScript mutation testing framework
The npm package @stryker-mutator/core receives a total of 81,016 weekly downloads. As such, @stryker-mutator/core popularity was classified as popular.
We found that @stryker-mutator/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.