Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
mocha-proshot
Advanced tools
A reporter for mocha that takes a screenshot after each failed Protractor test. The filename will be derived from the name of the failed test.
npm install --save-dev mocha-proshot
Use the environment variable PROSHOT_DIR
to specify the base directory for all screenshots.
Simply update your Protractor configuration file to set the screenshot path and specify mocha-proshot as your reporter:
'use strict';
process.env.PROSHOT_DIR = './reports/screenshots';
exports.config = {
...
framework: 'mocha',
mochaOpts: {
reporter: 'mocha-proshot'
},
...
};
You probably want to use mocha-multi to get your usual test reports alongside the screenshots:
'use strict';
process.env.PROSHOT_DIR = './reports/screenshots';
process.env.multi = 'spec=- mocha-proshot=-'; // See 'mocha-multi' for configuration details
exports.config = {
...
framework: 'mocha',
mochaOpts: {
reporter: 'mocha-multi'
},
...
};
Caveat: mocha-multi
does not work together with Protractor's sharding feature because the latter depends on some internals of builtin mocha reporters that mocha-multi
does not emulate. Use mocha-proshot
directly if you depend on sharding. See issue #1 for details.
FAQs
Mocha reporter that takes screenshot after protractor tests
The npm package mocha-proshot receives a total of 1,897 weekly downloads. As such, mocha-proshot popularity was classified as popular.
We found that mocha-proshot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.