
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Handow is an E2E test engine basing on Playwright Node.js APIs. Users can integrate it with handow-shm to scaffold a full featured test server, or run the test engine solely with CLI. Test developers can also import handow to Node.js application as APIs provider.
Highly recommended to clone the handow-seed to scaffold your test project if you are Handow users.
Who are handow users? The Handow users just want to import handow as a module package in their E2E applications. The handow-seed project is a good chice for Handow users create their test application quickly. If you prefer creating custom project and invoke Handow APIs by script or CLI, please refer Handow APIs And Commands.
Refer Handow Outline to see more details.
Make sure Node.js has been installed to your local machine, versions ">=12.0.0 && <15.0.0" are recommended.
$ npm install
Handow test engine is not a stand alone application. In order to run and debug the local handow project as a Node.js module, it should be installed to a main test application. The "/_testApp/" folder in handow source code is a simple test project, developers can use it as main application. Install local handow project to main test
The seed project to implement Handow on Github handow-seed
The Handow test server repository on NPM handow-shm
The Handow engin repository on NPM handow
MIT
FAQs
E2E test engine for web applications
We found that handow demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.