
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
cassproject
Advanced tools
cass-npm
CaSS NPM is the CaSS Library, published and available on NPM.
Documentation for the CaSS Library can be found in the documentation folder:
We're assuming you're coming from the NPM / GitHub space. To see a developer guide, go to https://devs.cassproject.org/
npm install --save cassprojectThe CaSS Library is a library, and as such can only be run self-contained against unit tests.
git clone --recurse-submodules -b <branch> https://github.com/cassproject/cass-npm - Get the code.npm i - Install dependencies.Running npm test requires Docker.
npm test - Runs unit tests in docker images against the CaSS 1.5 repositories using supported Node versions (18+) and Cypress against Edge, Chrome and Electron. Takes some time.Development unit tests presume you have a CaSS Repository running on localhost:80. You may get one by running docker run -d --name cass-test -p80:80 cassproject/cass:1.5.0
npm automocha - Runs mocha unit tests against current Node environment. Will rerun unit tests on-save.npm mocha - Runs mocha unit tests.npm webpack:cypress - Runs unit tests in Cypress against Chrome (headless)npm webpack:cypressEdge - Runs unit tests in Cypress against Edge (headless)npm webpack:cypress:open - Runs unit tests in Cypress in development mode using webpack packaging. Will rerun unit tests on-save.npm browserify:cypress:open - Runs unit tests in Cypress in development mode using browserify packaging. Will rerun unit tests on-save.npm upgrade --save Review dependencies, autocomplete version numbers to latest versions.npm version --no-git-tag-version <patch|minor|major>. This automatically updates package.json and yuidoc.json.npm run changelog, and review the changes in CHANGELOG.md.npm installnpm audit and fix any audit issues. Stop if npm audit --omit=dev has findings.npm test - Must not fail any tests.npm run webpack:cypressFirefoxHttps See if the firefox test case has changed.npm publish (must be npm logined)See CHANGELOG.md
FAQs
Competency and Skills Service
The npm package cassproject receives a total of 286 weekly downloads. As such, cassproject popularity was classified as not popular.
We found that cassproject demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.