Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Custom build tool for the chi
modules.
This tool is custom-made for modules such as chi-create. It is not intended to be a general-purpose build utility.
Lint JS files with JSHint by running chi-build lint
.
This lints the JS files with the options specified in the jshint.json
file in
this repositiory.
Tests must be written in the test.js
file in the working directory. The file
will be automatically bundled by
browserify.
Run automated tests with the chi-build test
command. Before automated tests
are run, all JS files are linted. This runs the tests with
sauce-tap-runner. It will run the
tests in browsers listed in the browsers.json
file in this repository. The
tests will be run by browsers in Sauce Labs. The
SAUCE_USER
and SAUCE_KEY
environment variables must be set to your Sauce
username and key, respectively.
Serve tests locally with the chi-build serve
command. This will bundle and
serve the tests in the same way as the automated tests. The output of the tests
will be displayed directly on the browser page. Use the --port
option to
determine the port that it will listen on (default 8000). Just refresh the page
to re-bundle and re-run the tests.
You can also use the JS API instead of using the chi-build
tool.
test(callback)
Runs all the tests in the browsers. Note that this will not lint the files. Callback will return an error if tests failed in any of the browsers.
lint(callback)
Lints the JS files. Callback will return an error if lint errors were found on any of the files.
serve(options, callback)
Starts the test server locally. Same as chi-build serve
. options
may contain
a port
option to specify the port it will listen on. Callback will return an
error if it could not start the server.
FAQs
Build scripts for the chi modules
We found that chi-build demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.