Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
fairsplice
Advanced tools
Fairsplice is a CLI tool designed to optimize test distribution across multiple workers. By intelligently selecting and saving test cases, Fairsplice ensures balanced workload distribution for your CI/CD pipelines, making tests run time more predictable.
Fairsplice is a CLI tool designed to optimize test distribution across multiple workers. By intelligently selecting and saving test cases, Fairsplice ensures balanced workload distribution for your CI/CD pipelines, making tests run time more predictable.
We found Github Actions lacking when compared to CircleCI which has tests splitting based on timings.
There are a number of projects like Split tests but they require uploading and downloading Junit XML files and merging them, or committing the Junit files to have them when running the tests.
This tool uses instead a Redis server to store the last 10 timings for each test file and uses the average of these to select tests. It is easy to setup if you have a Redis server running.
This project is built using Bun and Redis.
Ensure you have Bun installed. To launch it, run
bunx fairsplice
Before using Fairsplice, set the environment variable FAIRSPLICE_REDIS_URL
to your Redis server URL. This is necessary for storing and retrieving test case information.
export FAIRSPLICE_REDIS_URL='redis://myuser:mypassword@your-redis-url.upstash.io:33683'
Fairsplice supports two main commands: save
and select
.
To save test results:
fairsplice save --from <file>
--from <file>
: Specify the file path to read test results from.Example:
fairsplice save --from results/junit.xml
To select test cases for execution:
fairsplice select --pattern "<pattern>" [--pattern "<anotherPattern>" ...] --total <total> --index <index>
--pattern "<pattern>"
: Pattern to match test files. Can be used multiple times to specify multiple patterns.--total <total>
: Total number of workers in the test environment.--index <index>
: Index of the current worker (0-based).Example:
fairsplice select --pattern "test_*.py" --pattern "tests*.py" --total 3 --index 1
For a detailed list of commands and options, use the help command:
fairsplice --help
Contributions are welcome! Please fork the repository and submit a pull request with your improvements.
Launch the development version with:
bun run index.ts
Launch the following command to run tests:
bun test [--watch]
Fairsplice is open-source software licensed under the MIT license.
FAQs
**Warning: this project is still in very early development!**
The npm package fairsplice receives a total of 7,253 weekly downloads. As such, fairsplice popularity was classified as popular.
We found that fairsplice demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.