
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Sinon-VCR integrates with the sinon.fakeServer method of
SinonJS, allowing developers to select
a set of XHR responses to playback during test interactions.
You must have a test suite that:
require calls using i.e. Browserify or Webpack).npm install -D sinon-vcr
Create a mock (see below), or see Lunchtime Labs MockBuilder to learn how to generate them.
Place 'mock' files into your 'spec' or 'test' directory where they can be read.
i.e. spec/fixtures/vcr/.
Use the mocks in your tests as AJAX responses.
Example using Karma/Browserify
karma.conf.js
browserify: {
paths: [ __dirname + "/spec/fixtures/" ]
},
spec/fixtures/vcr/autoplayFalse.js
var response = {
"autoplay": "false"
};
module.exports = [
{
method: "GET",
url: /www\.example\.com/,
status: 200,
headers: {
"Content-Type": "application/json"
},
response: JSON.stringify(response)
}
]
Mocha Example
var VCR = require('sinon-vcr');
var autoplayFalse = require('vcr/autoplayFalse');
describe('myObject', function() {
beforeEach(function() {
VCR.init();
});
afterEach(function() {
VCR.reset();
});
it('responds with autoplay false', function(done) {
VCR.use(autoplayFalse);
$.get("http://www.example.com/", function (response) {
expect(response.autoplay).to.eq(false);
done();
});
});
});
Allows direct access to sinon's FakeServer
VCR.server.requests // Show requests received by Sinon FakeServer
function( capture: string )
Intitializes VCR and sets it up to receive
usecalls.
Optionally passing the string
capturewill allow ajax to pass through, and place adebuggerstatement in theresetmethod that will allow you an opportunity to pause Javascript exeution and save a.harfile.
VCR.init(); // Mock AJAX
VCR.init('capture'); // AJAX runs normally, stop JS execution at cleanup
function ()
Restore the sinon fakeServer between requests.
VCR.reset();
function (mock: object)
Use an XHR mock for XHR playback.
VCR.use(require('vcr/mock');
git clone git@github.com:lunchtime-labs/sinon-vcr.git
npm install
gulp or gulp test for TDD with Karma.
Uses Karma test runner with Mocha and the Jquery-Chai expectations library, with Sinon for mocking.
FAQs
sinon-vcr
The npm package sinon-vcr receives a total of 8 weekly downloads. As such, sinon-vcr popularity was classified as not popular.
We found that sinon-vcr demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.