
Security News
Deno 2.6 + Socket: Supply Chain Defense In Your CLI
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.
Sometimes simplicity is key. I find that to be the case for assertion libraries as well. There are tonnes of them out there and most of them come with all kinds of crazy features and implementations. These make it relatively difficult to understand what exactly is being tested, how to use the library to create your own assertions and to compose new predicates and assertions out of the existing ones.
The predicates and assertions in checko
Documentation for 1.0.0 can be found here.
Here is some information in case you would like to contribute to this project.
The source code for this package lives in the root of the repository. The package is built to the release/ directory which is ignored by git. The package.json along with some other files are also built to the release/ directory. This architecture allows us to have code at the root of the repository even if we are transpiling it. Having code at the root means we can include it like so
import aBitOfFunctionality from 'my-package/aBitOfFunctionality'
// versus
import aBitOfFunctionality from 'my-package/lib/aBitOfFunctionality'
git clone <repo_url> <repo_folder>
cd <repo_folder>
npm install
npm run setup
To publish a new version of this package you need to update its version, build it and publish it. This procedure is usually done with the following commands.
npm version (major|minor|patch)
cd release/
npm publish
FAQs
A composable and predictable predicate and assertion library
The npm package checko receives a total of 2 weekly downloads. As such, checko popularity was classified as not popular.
We found that checko demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.

Security News
New DoS and source code exposure bugs in React Server Components and Next.js: what’s affected and how to update safely.

Security News
Socket CEO Feross Aboukhadijeh joins Software Engineering Daily to discuss modern software supply chain attacks and rising AI-driven security risks.