Research
Security News
Malicious PyPI Package ‘pycord-self’ Targets Discord Developers with Token Theft and Backdoor Exploit
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Verb
in command line:
# ruby gem
gem install true
# bower package
bower install true
# npm module
npm install sass-true
With any Sass compiler
```scss
@import "true";
@include test-module('Utilities') {
// Testing Functions
@include test('Map Add [function]') {
$base: (one: 1, two: 1, three: 1);
$add: (one: 1, two: 2, three: -1);
$test: map-add($base, $add);
$expect: (one: 2, two: 3, three: 0);
@include assert-equal($test, $expect,
'Returns the sum of two numeric maps');
}
// Testing Mixins
@include test('Font Size [mixin]') {
@include assert('Outputs a font size and line height based on keyword.') {
@include output {
@include font-size(large);
}
@include expect {
font-size: 2rem;
line-height: 3rem;
}
}
}
}
// Optionally show summary report in CSS and/or the command line:
// - If you use Mocha, reporting to the command line is automatic.
// - if you use true-cli, report(terminal) is required for output.
@include report;
```
**Note:**
Function unit-tests work across the board,
but testing mixins can be a bit more complex.
At this point,
only Mocha is able to compare/report the results of mixin tests.
Without using Mocha,
you can test any mixin,
but you will have to compare the expected and actual results manually
in the output code.
Version control can make that much easier than it sounds.
With node-sass and Mocha (or other JS test runners)
Install true
via npm (npm install sass-true
).
Write some Sass tests in test/test.scss
(see above).
Write a shim JS test file in test/test_sass.js
:
var path = require('path');
var sassTrue = require('sass-true');
var sassFile = path.join(__dirname, 'test.scss');
sassTrue.runSass({file: sassFile}, describe, it);
Run Mocha, and see your Sass tests reported as individual test results.
You can call runSass
more than once, if you have multiple Sass test files you
want to run separately.
The first argument to runSass
accepts the same options that node-sass'
renderSync
function accepts. The only modification runSass
makes is to add
True's sass path to the includePaths
option, so @import 'true';
works in
your Sass test file.
Any other JS test runner with equivalents to Mocha's describe
and it
should
be usable in the same way; just pass your test runner's describe
and it
equivalents into runSass
.
Run Mocha using the Grunt task supplied by grunt-mocha-cli
Install grunt-mocha-cli
:
npm install grunt-mocha-cli --save-dev
Configure task:
grunt.loadNpmTasks('grunt-mocha');
mochacli: {
all: ['test/test_sass.js']
},
Run tests:
grunt mochacli
With ruby-sass on the command line
```bash
true-cli [options] PATH
```
Options:
* `-s` silent
* `-c` config file
* `-d` debug config file settings
Config file (optional):
```yaml
options:
color: true # enables colored output
# require ruby sass extension libraries
require:
- "compass"
- "serialy_sassy"
```
default location: `test/true.yml`
Settings
--------
There is only one setting:
`$true-terminal-output`
toggles output to the terminal on or off.
- `true` will show detailed information on failing assertions.
This is the default, and best for using `true-cli`.
- `false` to turn off all terminal output.
FAQs
Unit testing for Sass.
The npm package sass-true receives a total of 10,997 weekly downloads. As such, sass-true popularity was classified as popular.
We found that sass-true demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.