
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
NaNofuzz is a fast and easy-to-use automatic test suite generator for TypeScript that runs inside VS Code
NaNofuzz is a fast, easy-to-use automatic test suite generation tool for TypeScript that integrates with a developer's VS Code workflow. We like working code, and NaNofuzz is designed to be used during testing or development to more quickly reach working code nirvana. NaNofuzz is available in the the VS Code Marketplace.
Unlike many automatic test suite generation tools, NaNofuzz combines multiple approaches to help you generate a test suite. You can define properties of the program similar to QuickCheck or Hypothesis, manually annotate the correctness or incorrectness of a program's output similar to Jest, or use an approach similar to fuzzing and let NaNofuzz automatically draw your attention to likely errors.
Combining multiple approaches can help you quickly find errors and rapidly build a test suite. For example, without any guidance from you, NaNofuzz automatically draws your attention to a test if it:
These design choices allow NaNofuzz to be fast, lightweight, flexible, easy to integrate into an everyday workflow, and help developers quickly find important edge cases more quickly.
NaNofuzz supports standard and arrow functions with any mixture of the following parameter types:
NaNofuzz automatically generates a test suite in these formats for use in CI:
The following are not yet supported:
NaNofuzz is a research project not presently intended for production use. Contributions are welcome to address the limitations above.
To reference NaNofuzz in your research, we request you to cite our upcoming ESEC/FSE'23 paper:
Matthew C. Davis, Sangheon Choi, Sam Estep, Brad A. Myers, and Joshua Sunshine. NaNofuzz: A Usable Tool for Automatic Test Generation. In Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering, 2023.
Meet Nancy, the Silky Anteater! Silky anteaters are wonderfully-adapted, small, fuzzy creatures known to find and consume large quantities of bugs on a daily basis. Therefore, Nancy (or, NaNcy, if you prefer) is NaNofuzz' beloved mascot on your journey to find bugs.
FAQs
NaNofuzz is a fast and easy-to-use automatic test suite generator for TypeScript that runs inside VS Code
We found that nanofuzz demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.