
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
instant-mocha
Advanced tools
Build tests with Webpack and run them with Mocha in one command
How does it compare to mocha-webpack / mochapack? Answered in the FAQ.
npm i -D mocha webpack instant-mocha
Note: webpack
and mocha
are peer-dependencies so you can provide any version
instant-mocha [test paths/globs...]
You can either use npx
(eg. npx instant-mocha ...
) or add it to package.json
scripts (eg. npm test
) to invoke it.
Watch mode. Re-compiles the Webpack build and re-run tests on file-changes.
Default: webpack.config.js
Path to the Webpack config.
For more info, run:
instant-mocha --help
instant-mocha ---webpack-config webpack.config.js --require setup.js 'tests/*.spec.js'
webpack.config.js
setup.js
. Note, this is not apart of the build and is loaded directly from Node.jstests/*.spec.js
Set devtool: 'source-map'
in your Webpack config.
Add webpackbar to your Webpack config.
node_modules
automatically externalized?They can't be automatically externalized because it's possible some dependencies require bundling or pre-processing. For example, packages in ESM format or deep-dependencies that are stubbed for testing.
It's recommended to externalize what you can in your Webpack config to speed up the build though. Consider using webpack-node-externals
to do this.
First of all, major thanks to mocha-webpack for the original implementation and serving the community.
This project was created from scratch because mocha-webpack
is no longer maintained and doesn't have Webpack 5 support.
Some notable improvements include:
mocha-webpack
uses Flow.mocha-webpack
returns the number of failed tests as the exit code. instant-mocha only uses exit code 1
for any test failures as per Bash convention.FAQs
Build tests with Webpack and run them with Mocha in one command
We found that instant-mocha demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.