
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Tundra is a Javascript test data management utility to help streamline http data capture for end-to-end testing. The main goal is to help applications easily implement cold storage testing
Tundra is a Javascript test data management utility to help streamline http data capture for end-to-end testing. The main goal is to help applications easily implement cold storage testing. To do this, Tundra uses a client-server model:
Server
The server listens for requests sent to it by the client and records the traffic in a specific profile.
Client
The client is embedded in the application and helps do two things:
npm install -g tundra-cli
Choose the right adapter based on the http library you use within your application:
| Http Library | Adapter |
|---|---|
| Fetch | npm install tundra-fetch --save |
| Axios | Coming Soon |
Execute the following in a terminal at the root of your project: tundra -d exampleProfile -f fixtures
This will start a server at http://localhost:9091/requests to accept requests from an adapter.
| Parameter | Description |
|---|---|
| -p, --port | [default: 9091] The port of the Tundra server |
| -f, --fixtures-directory | [Optional] The directory of the fixtures folder in your project |
Within your app, embed a compatible Tundra adapter
| Adapter | Documentation |
|---|---|
| Fetch | Coming Soon |
| Axios | Coming Soon |
With the server started and the client embedded and wiretapping in your application, you are all set. Simply run through your manual test with live data just as you normally would.
When you are done with your manual test, go to the server console and enter the stop command. This will stop the server and store the http traffic in a .json file at {fixturesDirectory}/profiles/{profileName}.json.
Nice. You can follow the instructions for your particular client/adapter to replay the traffic during an end-to-end test.
FAQs
Tundra is a Javascript test data management utility to help streamline http data capture for end-to-end testing. The main goal is to help applications easily implement cold storage testing
The npm package tundra-cli receives a total of 1 weekly downloads. As such, tundra-cli popularity was classified as not popular.
We found that tundra-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.