
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
testing-library-providers
Advanced tools
testing-library-providers is utility for @testing-library/react
It allows you to nest provider components with ease
Note: react, react-dom and @testing-library/react are peer dependencies
yarn add react react-dom
yarn add -D testing-library/react
yarn add -D testing-library-providers
Goal of this library is to compose several providers, and provide props to them straight from the tests
First you should define your own typings for ProviderProps. You can extend current empty interface like this:

Then you write provider function:

Provider function is a function which recieves typed provider props and returns a function which gets react children
It's up to you then to wrap children with provider (or any other react component) and pass props if needed.
Now you are ready to use this library in a test

First you create render function by calling enhanceRender with arguments consisting of provider functions. This function is regular render function from @testing-library/react but it already wraps your component with providers
Note that order matter and providers will be composed from left to right
After that you are ready to render whatever you wish to test. If you want to pass some props, in this case mocked response to ApolloProvider you can do so by passing the mocks as a second parameter to render function.
Note that this is also fully typed.
FAQs
Utils for wrapping components in providers
We found that testing-library-providers demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.