
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
karma-osx-reporter
Advanced tools
Reporter using Mac OS 10.8+ Notification Center to display results.
Built on top of node-osx-notifier and based on AvnerCohen's code.
Only works with Karma 0.9 or later which enables custom plugins.
For more information on Karma see the homepage.
a. Globally. System-wide with karma
available on command line.
```
npm install -g karma
npm install -g karma-osx-reporter
```
b. Locally. If you want to install Karma to your project instead, add the dependencies to package.json
and run npm install
:
```js
"devDependencies": {
"karma": ">=0.9",
"karma-osx-reporter": "*"
}
```
If you install locally, you'll need to run Karma using `node_modules/.bin/karma`.
In any case, the plugin needs to be installed as a peer dependency to Karma (i.e. in the sibling folder). This just means you cannot use global Karma with local plugins or vice-versa.
karma.configure({
...
plugins: [
'karma-osx-reporter'
],
...
})
reporters: ['osx']
or pass through the command line
$ karma start --reporters=osx karma.conf.js
MIT License
FAQs
A Karma plugin. Report results with OSX Notification Center.
The npm package karma-osx-reporter receives a total of 617 weekly downloads. As such, karma-osx-reporter popularity was classified as not popular.
We found that karma-osx-reporter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.