
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
danger-testing
Advanced tools
This project was created to allow a developer to test their DangerJS dangerfile
through Jest unit testing.
It also works with testing imported DangerJS plugins.
:warning: This project is currently going through ramp up development.
Some things may change, some things may not work. Submit issues if you find any.
This package requires a minimum Danger and Jest version to function but it may function with future and previous versions as well. Create an issue/discussion if you test a version outside the required versions that you have found that works.
Until published install via direct GitHub link
$ npm install danger-testing --save-dev
This project assumes that Danger and Jest are already installed in your project.
Move dangerfile checks into a function or separate functions if you haven't done so previously.
// dangerfileFunctions.ts
// break your checks into functions that are exported.
// 📢 optionally, put all the functions inside a bigger function
// that's exported to test closer to how Danger would report.
export const checkLineAdditions = () => {
if (danger.github.pr.additions > 500) {
warn('PR exceeds number of lines added')
}
}
Create a test file like dangerfile.spec.ts
to write your tests.
// dangerfile.spec.ts
import { dangerTesting, warn } from 'danger-js-testing'
import { checkLineAdditions } from '../dangerfile'
it('should call warn function if PR additions exceed 500 lines of code', async() => {
await dangerTesting(checkLineAdditions, {
github: {
pr: {
additions: 900,
},
},
})
expect(warn).toHaveBeenCalledWith(
'PR exceeds number of lines added'
)
expect(warn).toHaveBeenCalledTimes(1)
})
Takes inspiration from the documentation on the Danger website and myself wanting to have an easy way to test Danger during development.
The dangerTesting
function accepts two arguments. One is the dangerfile
function you have
written for your tests. The second is the mock override we attach to the global danger
object.
When dangerTesting
is called it updates the global mock and then calls the passed in function.
This module exports danger like global mock functions like fail
, markdown
, message
, and warn
,
to allow you to check that they are called as expected.
FAQs
Easy to use testing of DangerJS/dangerfile
The npm package danger-testing receives a total of 0 weekly downloads. As such, danger-testing popularity was classified as not popular.
We found that danger-testing demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.