
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
App tester is an app built with all plugins known to vigour which presents the user with an input box allowing him to be redirected wherever. It's intended use is to help with app development.
http(s)://
) in the input boxDebugging requires the device to be plugged into your computer. Simulators and emulators should also work the same way.
chrome://inspect
adb logcat
(more info)develop
menu, find the device running the app-tester. In that submenu, you should find the page currently loaded.When the native code for a plugin changes, a new version of the app-tester has to be built and published to hockeyapp.
Building is as easy as npm run android
or npm run ios
. Of course you will need to have the tools for these platforms installed:
ANDROID_HOME
environment variable must point to the location of the Android SDK installation. In my case, I have:$ echo $ANDROID_HOME
/Users/shawn/android-sdks/
To publish an app to hockey, you will of course need the credentials to the hockey account, which you can find here
Building for Android creates a .apk file
. Simply upload this file to hockeyapp to allow others to install it.
Building for iOS creates an xcode project and workspace. If you open the workspace in xcode, you can then archive the project and export it as a .ipa
file which can be uploaded to hockey. The archiving and exporting parts require that you have some certificates and provisioning profiles in your keychain. Make sure you make a development build, otherwise the app-tester will lose it's debugging capabilities.
FAQs
Page + build for testing (on native)
We found that app-tester demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.