
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
A Grunt plugin for running Protractor runner.
This plugin requires Grunt ~0.4.1
If you haven't used Grunt before, be sure to check out the Getting Started guide, as it explains how to create a Gruntfile as well as install and use Grunt plugins. Once you're familiar with that process, you may install this plugin with this command:
npm install grunt-protractor-runner --save-dev
Once the plugin has been installed, it may be enabled inside your Gruntfile with this line of JavaScript:
grunt.loadNpmTasks('grunt-protractor-runner');
In your project's Gruntfile, add a section named protractor to the data object passed into grunt.initConfig().
grunt.initConfig({
protractor: {
options: {
configFile: "node_modules/protractor/referenceConf.js", // Default config file
keepAlive: true, // If false, the grunt process stops when the test fails.
args: {
// Arguments passed to the command
}
},
your_target: {
configFile: "e2e.conf.js", // Target-specific config file
options: {
args: {} // Target-specific arguments
}
},
},
})
Type: String
Default value: node_modules/protractor/referenceConf.js
A protractor config file.
Type: Boolean
Default value: true
If true, grunt process continues even if the test fails. This option is useful when using with grunt watch. If false, grunt process stops when the test fails.
Type: Boolean
Default value: false
If true, grunt will pass 'debug' as second argument to protractor CLI to enable node CLI debugging as described in Protractor Debugging documentation.
Type: Object
Default value: {}
Arguments passed to the command. Supported arguments are below.
string: A running selenium address to usestring: Location of the standalone selenium server .jar filestring: Optional port for the standalone selenium serverstring: URL to prepend to all relative pathsstring: Element housing ng-app, if not html or bodyarray: Array of spec files to test. Ex. ["spec1.js","spec2.js"]boolean: Print stack trace on errorboolean: Print full spec namesAfter npm install, you need to run script node_modules/protractor/bin/install_selenium_standalone to download
selenium to selenium/.
Then run grunt or npm test to test the module. You will encounter these.
In lieu of a formal styleguide, take care to maintain the existing coding style. Add unit tests for any new or changed functionality. Lint and test your code using Grunt.
options.debug (#7)FAQs
A Grunt plugin for running protractor runner.
We found that grunt-pr demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.