Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
cdk-lambda-nodejs-mock
Advanced tools
Mock out NodeJsFunction's processor-intensive calls to Parcel/Docker
The CDK NodejsFunction construct uses Parcel and Docker to conveniently bundle up your lambda modules. However this is a slow and processor-intensive operation, which results in very slow testing with e.g. Jest.
This module mocks out NodeJsFunctions by replacing them with a standard CDK Lambda Function for the purpose of testing only.
We recommend using this module across your entire CDK project, by editing your Jest config (e.g. in package.json) to add the following:
{
"moduleNameMapper": {
"@aws-cdk/aws-lambda-nodejs": "cdk-lambda-nodejs-mock"
}
}
You can use in a specific test file only, rather than globally, as follows:
jest.mock('@aws-cdk/aws-lambda-nodejs', () =>
require('cdk-lambda-nodejs-mock')
);
Note we use require rather than import, as jest.mock
is hoisted above import.
The module uses peerDependencies rather than dependencies, so that it uses exactly the same CDK version as in your project. This means that you don't need to do anything to make it work with whichever cdk version you are using.
CD Feature | Provided |
---|---|
✅ | Typescript |
✅ | Linting (AirBnB + Prettier) |
✅ | Unit tests (Jest) |
✅ | Coverage check (ideally 100% with Jest) |
✅ | Github Continuous Deployment |
This module is contributed by the team at Skyhook
FAQs
Mock out NodeJsFunction's processor-intensive calls to Parcel/Docker
The npm package cdk-lambda-nodejs-mock receives a total of 763 weekly downloads. As such, cdk-lambda-nodejs-mock popularity was classified as not popular.
We found that cdk-lambda-nodejs-mock demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.