Security News
PyPI’s New Archival Feature Closes a Major Security Gap
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
Make sure all your code is tested, don't miss anything. CoverJS intruments your code. Using the instrumented code with your tests will result in a nice object, which can be passed through one of the reporters to create a nice graphical output of your code.
Instead of instrumenting lines (like JSCoverage), CoverJS will instrument statements, which should result in a more precise result.
To instrument the code, CoverJS comes with a CLI tool:
coverjs --output cov/ file.js test/*
The instrumented code should be executed to count the number of calls for each statement.
Usually your tests will try to cover each statement.
An example code that will capture the output and generate a HTML report would look like:
var HTMLReporter = require('../lib/reporters/HTMLReporter');
require('../test-cov/test/fixture.js');
var reporter = new HTMLReporter(global.__$coverObject);
console.log(reporter.report());
The output stream can be redirected to a file using
node test.js > report.html
so the result can be viewed in a browser
There are different templates with which what the instrumented code should start and end. For node there exists an template that saves the output as a JSON file, which can later be used as to generate a HTML report.
coverjs --template node --report ./cov.json file.js
With the coverjs-report
tool, which reads from stdin
, an HTML output can be
generated:
cat ./cov.json | coverjs-report -r html > cov.html
See the prime Makefile for an example.
FAQs
JSCoverage compatible JavaScript code coverage tool
The npm package coverjs receives a total of 42 weekly downloads. As such, coverjs popularity was classified as not popular.
We found that coverjs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
Research
Security News
Malicious npm package postcss-optimizer delivers BeaverTail malware, targeting developer systems; similarities to past campaigns suggest a North Korean connection.
Security News
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.