
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
mock-web-server
Advanced tools
A lightweight simple helper utility to mock web-servers
Consider working on a API web client whose concerns are:
Consider the API server to be an expansive resource to access:
it could require API keys
it could be tethering your requests and fail builds
it risk resulting with monetary transactions
or whatever reason that drove you to decide to develop with a mock server
This utility helps you launch the simplest tiniest nodejs actual web-server, bind it to a port and configure it to play the role of the real API server.
But the real intention is to faciliate testing. The good part - is that you run it in-process to your test suite, and therefore can inspect progrmatically what requests it received (and perform asserts against them) and easily manipulate the response it emits.
mock-web-server
√ should be a factory function that names 1 arguments - response (it has an optional 2nd param for options)
when provided only a response object
√ should not fail and return an server instance
when provided a response object and the optional config object
√ should not fail and return an server instance
a server instance obtained by the factory
supported API:
√ method .listen(port, done) to start the server
√ method .close(done) to close it
√ attribute .response as the provided response
√ attribute .accepted as array of accepted requests
√ method .reset() to clear the accepted requests and optionally - reset the response
starting and closing the server should work
and the server should serve requests with
√ the provided status code
√ the provided headers
√ the provided body
and server keeps a REPL-friendly view of the accepted requests that is cleared with .reset()
√ found 3 requests
√ views are serializable
√ .reset() returns the interface and clears the accepted array
√ .reset(response) returns the interface and sets the response
structure of a request view should contain
√ httpVersion
√ method
√ url
√ headers
√ rawHeaders
√ upgrade
√ body
√ trailers
√ rawTrailers
closing the server with a callback
√ should call the callback as well as closing the server
an error passed by body-parser
√ should be collected to the request view as .parseError
~internals
.mapParsers(parsers)
√ should be a function that names 1 argument - parsers
when called with an object element
√ should not fail
when called with a function element
√ should not fail
when called with a string element that is not a body-parser built-in
√ should not fail and map it to an instance produced by the required module
when called with an object element who's first key is not a body-parser built-in
√ should not fail
√ should map it to an instance produced by the required module
√ should pass it the arguments
33 passing (94ms)
0.9.0
FAQs
A lightweight simple helper utility to mock web-servers
The npm package mock-web-server receives a total of 633 weekly downloads. As such, mock-web-server popularity was classified as not popular.
We found that mock-web-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.