Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
copy-logo-to-clipboard
Advanced tools
复制 tuchuang.space 的 logo 进入系统剪切板
文件 logo.png 的 md5 hash 值为 MD5 (logo.png) = 3c7185dd08b19791c4141f089616952f
该项目是做 https://github.com/Jiang-Xuan/tuchuang.space/issues/36 的 e2e 测试的辅助工具
import { copyLogoToClip, logoMd5Hash } from 'copy-logo-to-clipboard/index'
describe('上传图片交互', () => {
it('ctrl + v 可以正常粘贴图片', async () => {
await copyLogoToClip()
await ctrlvOnPage()
const uploadImage = await getImage()
expect(md5(uploadImage)).toEqual(logoMd5Hash)
})
})
暂时没有找到一个合适的和 electron 配合的测试框架, 所以使用了 nodejs 的 assert 断言. test 目录是一个 npm 包, npm run test
会执行 electron test
, 然后在 electron 的环境中执行 test/index.test.js
文件, 如果进程没有错误退出, 则测试成功, 如果进程错误退出, 则测试失败.
electron-builder 生成的 zip 文件有问题, 无法被 download 正常解压, 所以手动压缩生成的 app, exe 文件, Macos 下压缩 electron-builder 生成的 mac 目录
FAQs
copy tuchuang.space logo to system clipboard
The npm package copy-logo-to-clipboard receives a total of 2 weekly downloads. As such, copy-logo-to-clipboard popularity was classified as not popular.
We found that copy-logo-to-clipboard demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.