
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
botium-actions-on-google-testing
Advanced tools
This is an end-to-end testing library for developers building actions
This library allows developers to write automated testing for their actions in Node.js.
Examples can be found in the /examples
directory for two sample apps.
The Assistant SDK is used to give developers programmatic access to the Assistant and returns debug information about their actions that are in a test state.
Note: This library is currently in an alpha, experimental state. APIs may break between releases. Feedback and bugs can be provided by filing an issue in this repository.
credentials.json
filenode generate-credentials.js /path/to/credentials.json
Saved user credentials in "test-credentials.json"
test.js
'use strict';
const { ActionsOnGoogleAva } = require('actions-on-google-testing');
const { expect } = require('chai');
// Library will try to obtain credentials from environment variables in case
// credentials file is not specified
const action = new ActionsOnGoogleAva(require('./test/test-credentials.json'));
// Start out with giving a name to this test
action.startTest('Facts about Google - direct cat path', action => {
// Return a promise that starts a conversation with your test app
return action.start()
.then(({ textToSpeech }) => {
// Get a response back from your fulfillment.
// To continue the conversation, you can send
// a new text query. This starts the next
// turn of the conversation.
return action.send('cats');
})
.then(({ ssml }) => {
// The entire set of responses are listed below.
// You can use Chai to verify responses.
expect(ssml[0]).to.have.string("Alright, here's a cat fact.")
})
});
yarn
package.json
to add this test file to your test script."scripts": {
"test": "./node_modules/.bin/ava -c 1 -s ./test.js"
},
yarn test
. You should see your test be executed.NOTE You can also alternatively set the following environment variables - ACTIONS_TESTING_CLIENT_ID
,ACTIONS_TESTING_CLIENT_SECRET
, ACTIONS_TESTING_REFRESH_TOKEN
- to authenticate your Actions project with the Assistant SDK.
This library provides the following features to control your conversation:
action.start()
- Start your conversation with your action using "my test app".action.startWith()
- Start your conversation with your action using the specified action name.action.send()
- Send some phrase to your action.action.cancel()
- End your conversation. This library says "cancel".action.locale
- Set a locale for your conversation.action.location
- Set an array of a latitude and a longitude.These responses will come from your fulfillment, and will consist of whatever objects that you return.
res
.micOpen - Boolean
.textToSpeech - String[]
.displayText - String[]
.ssml - String[]
.cards - Card[]
.title - String
.subtitle - String
.text - String
.imageUrl - String
.imageAltText - String
.buttons - Button[]
.title - String
.url - String
.carousel - Array for Browse Carousel or Selection Carousel
.title - String
.description - String,
.imageUrl - String,
.imageAltText - String,
.url - String
.list
.title - String
.items - Item[]
.title - String
.description - String
.imageUrl - String
.imageAltText - String
.mediaResponse
.type - String
.name - String
.description - String
.sourceUrl - String
.icon - String
.suggestions - String[]
.linkOutSuggestion
.url - String
.name - String
.table
.headers - String[]
.rows - Row[]
.cells - String[]
.divider - Boolean
See LICENSE
FAQs
This is an end-to-end testing library for developers building actions
The npm package botium-actions-on-google-testing receives a total of 37 weekly downloads. As such, botium-actions-on-google-testing popularity was classified as not popular.
We found that botium-actions-on-google-testing demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.