Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
fairsplice
Advanced tools
Warning: this project is still in very early development!
Fairsplice is a CLI tool designed to optimize test distribution across multiple workers. By intelligently splitting and saving test cases, Fairsplice ensures a balanced workload distribution for your CI/CD pipelines, making tests run time more predictable.
We found Github Actions lacking when compared to CircleCI which has tests splitting based on timings.
There are a number of projects like Split tests but they require uploading and downloading Junit XML files and merging them, or committing the Junit files to have them when running the tests.
This tool uses instead a Redis server to store the last 10 timings for each test file and uses the average of these to split tests. It is easy to setup if you have a Redis server running.
This project is built using Bun and Redis.
Ensure you have Bun installed. To launch it, run
bunx fairsplice
Before using Fairsplice, set the environment variable FAIRSPLICE_REDIS_URL
to your Redis server URL. This is necessary for storing and retrieving test case information.
export FAIRSPLICE_REDIS_URL='redis://myuser:mypassword@your-redis-url.upstash.io:33683'
Fairsplice supports two main commands: save
and split
.
To save test results:
fairsplice save --from <file>
--from <file>
: Specify the file path to read test results from.Example:
fairsplice save --from results/junit.xml
To split test cases for execution:
fairsplice split --pattern "<pattern>" [--pattern "<anotherPattern>" ...] --total <total> --out <file> --replace-from <string> --replace-to <string> [--replace-from <other> --replace-to <other>]
--pattern "<pattern>"
: Pattern to match test files. Can be used multiple times to specify multiple patterns.--total <total>
: Total number of workers in the test environment.--out <file>
: File to write split test files to (newline separated)--replace-from <string>
: Substring to replace in the file paths (can be used multiple times)--replace-to <string>
: Replacement for the substring (can be used multiple times but must match the number of --replace-from)Example:
fairsplice split --pattern "test_*.py" --pattern "tests*.py" --total 3 --out split.json
For a detailed list of commands and options, use the help command:
fairsplice --help
Contributions are welcome! Please fork the repository and submit a pull request with your improvements.
Launch the development version with:
bun run index.ts
Launch the following command to run tests:
bun test [--watch]
Fairsplice is open-source software licensed under the MIT license.
FAQs
**Warning: this project is still in very early development!**
The npm package fairsplice receives a total of 7,253 weekly downloads. As such, fairsplice popularity was classified as popular.
We found that fairsplice demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.