
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
fauxpenai-conformance
Advanced tools
The FauxpenAI Conformance tool is designed to build, run, and record scenarios to test the compatibility of custom API servers with OpenAI's API.
The FauxpenAI Conformance tool is designed to build, run, and record scenarios to test the compatibility of custom API servers with OpenAI's API. This tool is used to:
Many API servers claim to be OpenAI-compatible, but their actual behavior may differ from OpenAI's. The FauxpenAI Conformance tool helps ensure that these servers meet the expected conformance standards by automating the testing process. It does so by:
The data for the test scenarios used in this tool is stored in the FauxpenAI Spec repository.
To install the FauxpenAI Conformance tool, use the NPM package:
npm install fauxpenai-conformance -g
export OPENAI_API_KEY="<your_openai_api_key>"
fauxpenai-conformance runScenarios --api=embeddings --baseUrl="https://your-server/v1" --scenariosFile=/path/to/data/embeddings/scenarios.json --resultsFile=/path/to/data/embeddings/results.json.gz
# or, change the API to chatcompletions, etc.
fauxpenai-conformance compareResults --api=embeddings --level=1 --resultsFile=/path/to/data/embeddings/results.json.gz --openaiResultsFile=/path/to/data/embeddings/openai-results.json.gz
fauxpenai-conformance createScenarios
# TODO
fauxpenai-conformance runScenarios
# TODO
We welcome contributions to improve the tool. If you have additional features or bug fixes, feel free to submit a pull request!
# create embeddings scenarios
fauxpenai-conformance createScenarios --api=embeddings --outputFile=/path/to/data/embeddings/scenarios.json
# or from source, e.g.
# ts-node src/main/main.ts createScenarios --api=embeddings --outputFile=/Users/aliok/go/src/github.com/aliok/FauxpenAI-spec/embeddings/scenarios.json
# create chatcompletions scenarios
fauxpenai-conformance createScenarios --api=chatcompletions --outputFile=/path/to/data/chatcompletions/scenarios.json
# or from source, e.g.
# ts-node src/main/main.ts createScenarios --api=chatcompletions --outputFile=/Users/aliok/go/src/github.com/aliok/FauxpenAI-spec/chatcompletions/scenarios.json
# set your OpenAI API key
export OPENAI_API_KEY="<your_openai_api_key>"
# run embeddings scenarios
fauxpenai-conformance runScenarios --api=embeddings --scenariosFile=/path/to/data/embeddings/scenarios.json --resultsFile=/path/to/data/embeddings/results.json.gz
# or from source, e.g.
# ts-node src/main/main.ts runScenarios --api=embeddings --scenariosFile=/Users/aliok/go/src/github.com/aliok/FauxpenAI-spec/embeddings/scenarios.json --resultsFile=/Users/aliok/go/src/github.com/aliok/FauxpenAI-spec/embeddings/results.json.gz
# run chatcompletions scenarios
fauxpenai-conformance runScenarios --api=chatcompletions --scenariosFile=/path/to/data/chatcompletions/scenarios.json --resultsFile=/path/to/data/chatcompletions/results.json.gz
# or from source, e.g.
# ts-node src/main/main.ts runScenarios --api=chatcompletions --scenariosFile=/Users/aliok/go/src/github.com/aliok/FauxpenAI-spec/chatcompletions/scenarios.json --resultsFile=/Users/aliok/go/src/github.com/aliok/FauxpenAI-spec/chatcompletions/results.json.gz
# update the version in package.json to something like "0.0.6"
npm install
git add .
git commit -m "Release 0.0.6"
git tag -a "0.0.6" -m "Release 0.0.6"
git push --follow-tags
# create a new release on GitHub
gh release create
# update the version in package.json to something like "0.0.7-dev"
npm install
git add .
git commit -m "Start 0.0.7-dev"
git push
FAQs
The FauxpenAI Conformance tool is designed to build, run, and record scenarios to test the compatibility of custom API servers with OpenAI's API.
We found that fauxpenai-conformance demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.