
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A wannabe tiny largely-drop-in replacement for ava that works in the browser too.
A wannabe tiny largely-drop-in replacement for ava that works in the browser too.
ava-like: if you like ava's APIs you'll like fava's too, because it provides essentially the same APIs.This is still very much a work in progress, compared to ava it currently has the following drawbacks (and probably more):
ava's.snapshot and try assertions are not implemented.Basically unless you want to play with this or you absolutely need an ava-like testing framework in the browser I wouldn't recommend using this.
npm install --save-dev fava
import {assert, test, describe, suite} from 'fava';
// A standalone assertion library is provided
assert.deepEqual ( [1], [1] );
// A "suite" function is provided, for opt-in better code organization
// You can totally just not use it at all
suite ( 'Example suite', describe => {
// A "describe" function is provided, for opt-in better code organization
// "describe" functions can be nested indefinitely
// You can totally just not use it at all
describe ( 'Example describe', test => {
// A "test" function is provided, it should work just like ava's
test ( 'Example test', t => {
// A "t" context object is provided, it should work just like ava's
t.pass ();
});
});
});
For further documentation for now just refer to ava's.
@liquid: I have used Fava and it's bean a pleasure.MIT © Fabio Spampinato
FAQs
A wannabe tiny largely-drop-in replacement for ava that works in the browser too.
The npm package fava receives a total of 190 weekly downloads. As such, fava popularity was classified as not popular.
We found that fava demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.