
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Wrapper enabling Bats to source and test Zsh scripts.
npm is the preferred installation method.
npm install bats-zsh
This project provides the following functions:
zsourceUsed in place of source to source 1 or more Zsh files.
@test 'zsource sample test'{
zsource path/to/zsh-file1.sh
zsource path/to/zsh-file2.sh
}
When multiple files are sourced using zsource, conflicts will be handled the same as source would. In effect, when there is a conflict, the newer version will overwrite the older one.
zrunUsed in place of run to run a function from the sourced Zsh script.
@test 'output_number_of_args() outputs the number of args' {
zsource path/to/zsh-file.sh
zrun output_number_of_args arg1 arg2 arg3
[ "$status" -eq 0 ]
[ "$output" = "there were 3 args" ]
[ "$BATS_RUN_COMMAND" = "zrun output_number_of_args arg1 arg2 arg3" ]
}
All variables expected from run will be set (i.e. status, output, and BATS_RUN_COMMAND).
zsetUsed to set or change global variables in the sourced files.
@test 'say_my_name() outputs \$MY_NAME'{
zsource path/to/zsh-file.sh
zrun say_my_name
[ "$output" = "You don't have a name" ]
zset MY_NAME="David"
zrun say_my_name
[ "$output" = "Your name is David" ]
}
git clone https://github.com/targendaz2/bats-zsh.gitnpm installnpm run shellchecknpm test testFAQs
Wrapper enabling Bats to test functions in Zsh scripts
The npm package bats-zsh receives a total of 1 weekly downloads. As such, bats-zsh popularity was classified as not popular.
We found that bats-zsh demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.