Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Drop in replacement for mocha to abstract commonly used test setups
Install with npm:
$ npm install --save node-tdd
Drop-in extension for mocha by simply importing describe
as below.
const expect = require('chai').expect;
const { describe } = require('node-tdd');
describe('Testing some stuff', /* { ...options }, */ () => {
it('Testing a thing', () => {
expect(3 * 7).to.equal(21);
});
});
Please see tests for further usage examples.
Type: string
The tmp directory for this test. Only available when useTmpDir
is set.
Type: object
Can be called to interact with the currently captured logs. Exposes the following functions:
get(level = null)
: Returns array of recorded logs. Can be restricted by passing in the log level.reset()
: Reset currently captured logsverbose(flag: boolean)
: Set verbosity mode of capture (if the original logger function is called)Only available when recordConsole
is set.
Type: function
Utility function that takes a function as an argument, calls it and expects it to raise an error. The raised error is returned. If no error is raised an assertion error is thrown instead.
Type: function
Utility function that can be used to load test fixtures from the fixtureFolder
.
Internally this uses smart-fs to determine how a file extension is loaded.
If the fixture is unique, the file extensions is not required.
Type: boolean
Default: false
When set to true, a fresh temporary directory is set up for each test. The directory is cleaned up after the test run has completed.
Type: boolean
Default: false
When set to true, all requests are automatically nocked. The recording files are automatically created relative to the current test file.
Type: string
Default: $FILENAME__cassettes
Used to customize the folder name that contains the nock cassettes. This can be useful when multiple describe in the same file use nock.
Type: string
Default: $FILENAME__fixtures
Used to customize the folder name that contains the test fixtures.
Fixtures can be loaded by calling fixture(FIXTURE_NAME)
.
Type: string
Default: $FILENAME.env.yml
Used to customize the name of the file that environment variables are loaded from, if it exists.
To allow overwriting of environment variables, prefix the name of the environment variable with ^
.
Type: object
Default: -
Used to declare environment variables per describe. Overwrites environment variables
loaded from envVarsFile
(if allowed).
To allow overwriting of environment variables, prefix the name of the environment variable with ^
.
Type: number
Default: -
Set unix timestamp to freeze time to. Will modify the result of e.g. new Date()
.
Type: object
Default: -
Expects logger (e.g. console
) to be passed in and captures input,
which can be accessed by using recorder
from within the test.
Type: string
Default: -
When set, randomization is overwritten and consistent per test using the provided seed.
Type: number
Default: -
Set the timeout for all tests in the suite.
FAQs
Drop in extension for mocha to abstract commonly used test setups
We found that node-tdd demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.