
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
Run TAP tests at Sauce Labs. A more opinionated smokestack. airtap is a another, well-known alternative.
stdout, so that you can use it as a drop-in replacement for node test.js.It is is heavily inspired by smokestack, but more lightweight because it will run the tests only on remote browsers. It is less battle-proven and has less niche features.
npm install chutney
chutney requires you to have TAP-generating tests, which you bundle e.g. using Browserify. You will also need a Sauce Labs account.
// test.js
const test = require('tape')
const awesomeTool = require('.')
test('awesome tool is awesome', (t) => {
t.plan(1)
t.equal(awesomeTool(), 'awesome')
})
Export your Sauce Labs credentials as well as the desired platform & browser.
export SAUCE_USER=derhuerst
export SAUCE_KEY=1a04c633-6a58-4aba-8287-54fdd18f9851
export PLATFORM='Windows 10'
export BROWSER=Chrome
Now run the tests. You may pretty-print the results using any reporter like tap-spec.
browserify test.js | chutney | tap-spec
Usage:
chutney [--timeout <seconds>]
Options:
--timeout -t Set the timeout in seconds. Default: 20
Examples:
browserify test.js | chutney | tap-spec
If you have a question, found a bug or want to propose a feature, have a look at the issues page.
FAQs
Run tape tests at Sauce Labs.
The npm package chutney receives a total of 5 weekly downloads. As such, chutney popularity was classified as not popular.
We found that chutney demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.