Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
ember-sinon-qunit-codemod
Advanced tools
A jscodeshift based codemod to help migrate to ember-sinon-qunit V4.
This codemod converts usages of this.sandbox
to sinon
, and removes usages of ember-sinon-sandbox
and ember-sinon-sinoff
. Lastly, it will remove usages of sinon.restore
as it is not needed in V4.
WARNING: jscodeshift
, and thus this codemod, edits your files in place.
It does not make a copy. Make sure your code is checked into a source control
repository like Git and that you have no outstanding changes to commit before
running this tool.
cd my-ember-app-or-addon
npx ember-sinon-qunit-codemod tests
Make sure to remove any deprecated libraries, such as ember-sinon-sandbox
or ember-sinon-sinoff
and then use the latest ember-sinon-qunit
npm i -D ember-sinon-qunit
Keep in mind that this codemod may end up leaving unwanted whitespace when importing sinon. This can be autofixed with a proper eslint rule.
FAQs
A codemod for migrating to ember-sinon-qunit V4
The npm package ember-sinon-qunit-codemod receives a total of 7 weekly downloads. As such, ember-sinon-qunit-codemod popularity was classified as not popular.
We found that ember-sinon-qunit-codemod demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.