
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
cypress-tab-until
Advanced tools
Cypress keyboard only tests
npm i -D cypress-tab-until
# or
yarn add -D cypress-tab-until
cypress-tab-until
extends the cy
command.
Add the following to your project's cypress/support/commands.js
:
import 'cypress-tab-until';
You can then start writing tests that just use the keyboard
cy.enableAccessibility(); // must be run once, needed to retrieve the accessibility tree
cy.tabUntil({ accessibleTextIs: 'Username' });
cy.focused().type('some-username');
cy.tabUntil({accessibleTextIs: 'Password'}});
cy.focused().type('some-password');
cy.tabUntil({accessibleTextIs: 'Something up the page', direction: 'backwards'});
cy.disableAccessibility(); // must be run once, stops tracking accessibility
The accessible text for an element is calculated by fetching the node from the Accessibility Tree (using getPartialTree
) and looking at the names within that node.
This means that the following all have the same accessible text:
<a href="#">Something</a>
<button>Something</a>
<input aria-label="Something">
This pushes us as developers to write tests that must consider the content being surfaced to a screen reader.
FAQs
Cypress keyboard accessibility tests
The npm package cypress-tab-until receives a total of 0 weekly downloads. As such, cypress-tab-until popularity was classified as not popular.
We found that cypress-tab-until demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.