
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
@vitest/expect
Advanced tools
Jest's expect matchers as a Chai plugin.
import {
JestAsymmetricMatchers,
JestChaiExpect,
JestExtend,
} from '@vitest/expect'
import * as chai from 'chai'
// allows using expect.extend instead of chai.use to extend plugins
chai.use(JestExtend)
// adds all jest matchers to expect
chai.use(JestChaiExpect)
// adds asymmetric matchers like stringContaining, objectContaining
chai.use(JestAsymmetricMatchers)
Jest is a well-known testing framework that includes its own expectation library, very similar to @vitest/expect. It offers a comprehensive suite of features for testing JavaScript code, including snapshot testing, global setup/teardown, and more. Compared to @vitest/expect, Jest is more established but also heavier, making @vitest/expect a lighter alternative for projects already using Vitest.
Chai is an assertion library for node and the browser that can be paired with any testing framework. It offers a range of interfaces (expect, should, assert) that allow developers to write tests in a style that suits them best. Compared to @vitest/expect, Chai is more flexible in terms of integration but does not offer the same level of integration with the Vitest ecosystem.
The expect package is another assertion library that provides a set of extensive matchers to write tests. It is lightweight and does not tie itself to a specific test runner. While it shares similar functionalities with @vitest/expect, it lacks the tight integration and specific optimizations for the Vitest environment.
FAQs
Jest's expect matchers as a Chai plugin
The npm package @vitest/expect receives a total of 61,341,597 weekly downloads. As such, @vitest/expect popularity was classified as popular.
We found that @vitest/expect demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.