Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
portman-sugar
Advanced tools
Enhances Portman with modular test configurations, automated test discovery, and predefined overrides for streamlined API testing workflows.
Extend the capabilities of Portman with portman-sugar
, a module designed to streamline the management and execution of API tests using the Portman framework. portman-sugar
simplifies test configurations, supports modular test files, and enhances test maintenance and readability.
portman-sugar
alongside other Portman tools without any conflict.Install portman-sugar
via npm:
npm install --save-dev portman-sugar
Prepare your test files in a specified directory. Each test file should declare an API operation and may include variations and assigned variables.
Run the tool using the command-line interface. Here are some options you can configure:
npx portman-sugar --testFolder ./path/to/tests --collectionName "Your Collection Name"
--testFolder
: Path to the folder containing test files.--collectionName
: Name of the generated Postman collection.--openApi
: Path to your OpenAPI specification file (default: ./openapi.yaml
).--output
: Path for the output Postman collection JSON file (default: ./postman.collection.json
).Additional options include setting paths for various configurations like --authConfig
, handling different types of tests (--contractTests
, --fuzzingTests
), and excluding default configurations with --excludeDefault
.
Below is an example command to run portman-sugar
:
node dist/index.js --testFolder ./api-tests --collectionName "API Collection" --output ./output/postman.collection.json
Contributions are welcome! Please open an issue to discuss your ideas or submit a pull request.
This project is licensed under the ISC License - see the LICENSE file for details.
FAQs
Enhances Portman with modular test configurations, automated test discovery, and predefined overrides for streamlined API testing workflows.
We found that portman-sugar demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.