
Security News
pnpm 11.5 Adds Support for Recognizing npm Staged Publishes
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.
Various CTRF utilities available by command line
⭐ If you find this project useful, consider giving it a GitHub star ⭐
It means a lot to us and helps us grow this open source library.
We believe CTRF can save a lot of time for engineers, a single data serialisation report, well structured, community driven and works with any framework. For over 30 years software engineers have used a de facto data serialisation report, you know the one! But we feel it’s time to modernise.
The only way we can grow CTRF is with your help and the support of the software engineering community.
Thank you so much!!
| Name | Details |
|---|---|
merge | Merge multiple CTRF reports into a single report. |
This might be useful if you need a single report, but your chosen reporter generates multiple reports through design, parallelisation or otherwise.
To merge CTRF reports in a specified directory, use the following command:
npx ctrf merge <directory>
Replace directory with the path to the directory containing the CTRF reports you want to merge.
-o, --output filename: Output file name for the merged report. Default is ctrf-report.json.
npx ctrf merge <directory> --output my-merged-report.json
-d, --output-dir directory: Output directory for the merged report. Default is the same directory as the input reports.
npx ctrf merge <directory> --output-dir /path/to/output
-k, --keep-reports: Keep existing reports after merging. By default, the original reports will be deleted after merging.
npx ctrf merge <directory> --keep-reports
Merge all CTRF reports in the ctrf directory into a single report named merged-report.json and save it in the output directory, keeping the original reports:
npx ctrf merge ctrf --output merged-report.json --output-dir output --keep-reports
CTRF is a universal JSON test report schema that addresses the lack of a standardized format for JSON test reports.
Consistency Across Tools: Different testing tools and frameworks often produce reports in varied formats. CTRF ensures a uniform structure, making it easier to understand and compare reports, regardless of the testing tool used.
Language and Framework Agnostic: It provides a universal reporting schema that works seamlessly with any programming language and testing framework.
Facilitates Better Analysis: With a standardized format, programatically analyzing test outcomes across multiple platforms becomes more straightforward.
If you find this project useful, consider giving it a GitHub star ⭐ It means a lot to us.
FAQs
CTRF reference implementation in TypeScript for creating and validating CTRF documents.
The npm package ctrf receives a total of 181,490 weekly downloads. As such, ctrf popularity was classified as popular.
We found that ctrf demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.