
Security News
Django Joins curl in Pushing Back on AI Slop Security Reports
Django has updated its security policies to reject AI-generated vulnerability reports that include fabricated or unverifiable content.
fast-check
Advanced tools
fast-check is a property-based testing library for JavaScript and TypeScript. It allows developers to define properties that should hold true for a wide range of inputs, and then automatically generates test cases to verify those properties. This helps in identifying edge cases and ensuring the robustness of the code.
Property-based Testing
This feature allows you to define properties that should hold true for a wide range of inputs. In this example, the property being tested is the commutativity of addition.
const fc = require('fast-check');
fc.assert(
fc.property(fc.integer(), fc.integer(), (a, b) => {
return a + b === b + a;
})
);
Custom Arbitraries
Custom arbitraries allow you to define complex data structures for your tests. In this example, a custom arbitrary is created that generates objects with a number and a string.
const fc = require('fast-check');
const myArbitrary = fc.tuple(fc.integer(), fc.string()).map(([num, str]) => ({ num, str }));
fc.assert(
fc.property(myArbitrary, ({ num, str }) => {
return typeof num === 'number' && typeof str === 'string';
})
);
Shrinkable Values
Shrinkable values help in minimizing the size of failing test cases to make debugging easier. In this example, if the property fails, fast-check will try to find the smallest array that causes the failure.
const fc = require('fast-check');
fc.assert(
fc.property(fc.array(fc.integer()), (arr) => {
return arr.length < 100;
}),
{ verbose: true }
);
jsverify is another property-based testing library for JavaScript. It offers similar functionality to fast-check, such as defining properties and generating test cases. However, fast-check is generally considered to have a more modern API and better TypeScript support.
testcheck is a property-based testing library inspired by QuickCheck. It provides similar capabilities for generating test cases and defining properties. Compared to fast-check, testcheck is less actively maintained and has fewer features.
Hypothesis is a property-based testing library for Python, but it has inspired several JavaScript libraries, including fast-check. While not a direct competitor, it offers similar concepts and is often used as a reference for property-based testing.
Install the module with: npm install fast-check
Using fast-check with mocha is really straightfoward.
It can be used directly in describe
, it
blocks with no extra care.
The following snippets written in Javascript shows an example featuring two properties:
const fc = require('fast-check');
// Code under tests
const contains = (text, pattern) => text.indexOf(pattern) >= 0;
// Properties
describe('properties', () => {
it('should always contain itself', () => {
fc.assert(fc.property(fc.string(), text => contains(text, text)));
});
it('should always contain its substrings', () => {
fc.assert(fc.property(fc.string(), fc.string(), fc.string(), (a,b,c) => contains(a+b+c, b)));
});
});
In case of failure, the tests would raise a red flag and the output should help you to diagnose what went wrong in your implementation (example with a failing implementation of contain):
1) should always contain its substrings
Property failed after 1 tests (seed: 1515709471288): [,,]
Got error: Property failed by returning false
fc.property
: define a new property ie. a list of arbitraries and a test function to assess the successThe predicate would be considered falsy if its throws or if output == null || output == true
evaluate to false
.
function property<T1>(
arb1: Arbitrary<T1>,
predicate: (t1:T1) => (boolean|void)): Property<[T1]>;
function property<T1,T2>(
arb1: Arbitrary<T1>, arb2: Arbitrary<T2>,
predicate: (t1:T1,t2:T2) => (boolean|void)): Property<[T1,T2]>;
...
fc.asyncPoperty
: define a new property ie. a list of arbitraries and an asynchronous test function to assess the successThe predicate would be considered falsy if its throws or if output == null || output == true
evaluate to false
(after await
).
function asyncProperty<T1>(
arb1: Arbitrary<T1>,
predicate: (t1:T1) => Promise<boolean|void>): AsyncProperty<[T1]>;
function asyncProperty<T1,T2>(
arb1: Arbitrary<T1>, arb2: Arbitrary<T2>,
predicate: (t1:T1,t2:T2) => Promise<boolean|void>): AsyncProperty<[T1,T2]>;
...
fc.assert
: run the property and throws in case of failureThis function has to be awaited in case it is called on an asynchronous property.
This function is ideal to be called in describe
, it
blocks.
It does not return anything in case of success.
It can be parametrized using its second argument.
export interface Parameters {
seed?: number; // optional, initial seed of the generator: Date.now() by default
num_runs?: number; // optional, number of runs before success: 100 by default
logger?: (v: string) => void; // optional, log output: console.log by default
}
function assert<Ts>(property: IProperty<Ts>, params?: Parameters);
fc.check
: run the property and return an object containing the test status along with other useful detailsThis function has to be awaited in case it is called on an asynchronous property.
It should never throw whatever the status of the test.
It can be parametrized with the same parameters than fc.assert
.
The details returned by fc.check
are the following:
interface RunDetails<Ts> {
failed: boolean, // false in case of failure, true otherwise
num_runs: number, // number of runs (all runs if success, up and including the first failure if failed)
num_shrinks: number, // number of shrinks (depth required to get the minimal failing example)
seed: number, // seed used for the test
counterexample: Ts|null, // failure only: shrunk conterexample causig the property to fail
error: string|null, // failure only: stack trace and error details
}
function check<Ts>(property: IProperty<Ts>, params?: Parameters);
fc.sample
: sample generated values of an Arbitrary<T>
or Property<T>
It builds an array containing all the values that would have been generated for the equivalent test.
It also accept Parameters
as configuration in order to help you diagnose the shape of the inputs that will be received by your property.
type Generator<Ts> = Arbitrary<Ts> | IProperty<Ts>;
function sample<Ts>(generator: Generator<Ts>): Ts[];
function sample<Ts>(generator: Generator<Ts>, params: Parameters): Ts[];
function sample<Ts>(generator: Generator<Ts>, num_generated: number): Ts[];
fc.statistics
: classify the values produced by an Arbitrary<T>
or Property<T>
It provides useful statistics concerning generated values. In order to be able to gather those statistics it has to be provided with a classifier function that can classify the generated value in zero, one or more categories (free labels).
It also accept Parameters
as configuration in order to help you diagnose the shape of the inputs that will be received by your property.
Statistics are dumped into console.log
but can be redirected to another source by modifying the logger
key in Parameters
.
type Generator<Ts> = Arbitrary<Ts> | IProperty<Ts>;
type Classifier<Ts> = ((v: Ts) => string) | ((v: Ts) => string[]);
function statistics<Ts>(generator: Generator<Ts>, classify: Classifier<Ts>): void;
function statistics<Ts>(generator: Generator<Ts>, classify: Classifier<Ts>, params: Parameters): void;
function statistics<Ts>(generator: Generator<Ts>, classify: Classifier<Ts>, num_generated: number): void;
Arbitraries are responsible for the random generation (but deterministic) and shrink of datatypes. They can be combined together to build more complex datatypes.
fc.boolean()
either true
or false
Integer values:
fc.integer()
all possible integers ie. from -2147483648 (included) to 2147483647 (included)fc.integer(max: number)
all possible integers between -2147483648 (included) and max (included)fc.integer(min: number, max: number)
all possible integers between min (included) and max (included)fc.nat()
all possible positive integers ie. from 0 (included) to 2147483647 (included)fc.nat(max: number)
all possible positive integers between 0 (included) and max (included)Floating point numbers:
fc.float()
uniformly distributed float
value between 0.0 (included) and 1.0 (excluded)fc.double()
uniformly distributed double
value between 0.0 (included) and 1.0 (excluded)Single character only:
fc.hexa()
one character in 0123456789abcdef
(lower case)fc.base64()
one character in A-Z
, a-z
, 0-9
, +
or /
fc.char()
between 0x20 (included) and 0x7e (included) , corresponding to printable characters (see https://www.ascii-code.com/)fc.ascii()
between 0x00 (included) and 0x7f (included)fc.unicode()
between 0x0000 (included) and 0xffff (included)Multiple characters:
fc.hexaString()
or fc.hexaString(maxLength: number)
string based on characters generated by fc.hexa()
fc.base64String()
or fc.base64String(maxLength: number)
string based on characters generated by fc.base64()
. Provide valid base 64 strings: length always multiple of 4 padded with '=' charactersfc.string()
or fc.string(maxLength: number)
string based on characters generated by fc.char()
fc.asciiString()
or fc.asciiString(maxLength: number)
string based on characters generated by fc.ascii()
fc.unicodeString()
or fc.unicodeString(maxLength: number)
string based on characters generated by fc.unicode()
Strings that mimic real strings, with words and sentences:
json()
or json(maxDepth: number)
json strings having keys generated using fc.string()
. String values are also produced by fc.string()
unicodeJson()
or unicodeJson(maxDepth: number)
json strings having keys generated using fc.unicodeString()
. String values are also produced by fc.unicodeString()
fc.lorem()
, fc.lorem(maxWordsCount: number)
or fc.lorem(maxWordsCount: number, sentencesMode: boolean)
lorem ipsum strings. Generator can be configured by giving it a maximum number of characters by using maxWordsCount
or switching the mode to sentences by setting sentencesMode
to true
in which case maxWordsCount
is used to cap the number of sentences allowed. This arbitrary is not shrinkablefc.constant<T>(value: T): Arbitrary<T>
constant arbitrary only able to produce value: T
fc.oneof<T>(...arbs: Arbitrary<T>[]): Arbitrary<T>
randomly chooses an arbitrary at each new generation. Should be provided with at least one arbitrary. All arbitraries are equally probable and shrink is still working for the selected arbitraryfc.option<T>(arb: Arbitrary<T>): Arbitrary<T | null>
or fc.option<T>(arb: Arbitrary<T>, freq: number): Arbitrary<T | null>
arbitrary able to nullify its generated value. When provided a custom freq
value it changes the frequency of null
values so that they occur one time over freq
tries (eg.: freq=5
means that 20% of generated values will be null
and 80% would be produced through arb
). By default: freq=5
fc.array<T>(arb: Arbitrary<T>): Arbitrary<T[]>
, fc.array<T>(arb: Arbitrary<T>, maxLength: number): Arbitrary<T[]>
or fc.array<T>(arb: Arbitrary<T>, minLength: number, maxLength: number): Arbitrary<T[]>
array of random length containing values generated by arb
. By setting the parameters minLength
and/or maxLength
, the user can change the minimal (resp. maximal) size allowed for the generated array. By default: minLength=0
and maxLength=10
fc.tuple<T1,T2,...>(arb1: Arbitrary<T1>, arb2: Arbitrary<T2>, ...): Arbitrary<[T1,T2,...]>
tuple generated by aggregating the values of arbX
like generate: () => [arb1.generate(), arb2.generate(), ...]
. This arbitrary perfectly handle shrinks and is able to shink on all the generatorsfc.dictionary<T>(keyArb: Arbitrary<string>, valueArb: Arbitrary<T>): Arbitrary<{[Key:string]:T}>
dictionary containing keys generated using keyArb
and values gneerated by valueArb
The framework is able to generate totally random objects in order to adapt to programs that do not requires any specific data structure. All those custom types can be parametrized using ObjectConstraints.Settings
.
export module ObjectConstraints {
export interface Settings {
maxDepth?: number; // maximal depth allowed for this object
key?: Arbitrary<string>; // arbitrary for key
values?: Arbitrary<any>[]; // arbitrary responsible for base value
};
};
Default for key
is: fc.string()
.
Default for values
are: fc.boolean()
, fc.integer()
, fc.double()
, fc.string()
and constants among null
, undefined
, Number.NaN
, Number.MIN_VALUE
, Number.MAX_VALUE
, Number.MIN_SAFE_INTEGER
or Number.MAX_SAFE_INTEGER
.
fc.anything()
or fc.anything(settings: ObjectConstraints.Settings)
generate a possible values coming from Settings and all objects or arrays derived from those same settingsfc.object()
or fc.object(settings: ObjectConstraints.Settings)
generate an objectFAQs
Property based testing framework for JavaScript (like QuickCheck)
The npm package fast-check receives a total of 2,175,925 weekly downloads. As such, fast-check popularity was classified as popular.
We found that fast-check demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Django has updated its security policies to reject AI-generated vulnerability reports that include fabricated or unverifiable content.
Security News
ECMAScript 2025 introduces Iterator Helpers, Set methods, JSON modules, and more in its latest spec update approved by Ecma in June 2025.
Security News
A new Node.js homepage button linking to paid support for EOL versions has sparked a heated discussion among contributors and the wider community.