Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
wdio-appium-service
Advanced tools
webdriver.io service plugin for Appium. With this service installed, you need not to run Appium manually.
The easiest way is to keep wdio-appium-service
as a devDependency in your package.json
.
{
"devDependencies": {
"wdio-appium-service": "~0.2.2"
}
}
You can do this simply by adding it with:
npm install wdio-appium-service --save-dev
Please register this package as service plugin and specify command line arguments in wdio.conf. 'appium'
is used for command. If command
key is provided in the configuration, it will be used.
{
... // Other config
services: ['appium'],
appium: {
args: {
address: '127.0.0.1',
commandTimeout: '7200',
sessionOverride: true,
debugLogSpacing: true,
platformVersion: '9.1',
platformName: 'iOS',
showIosLog: true,
deviceName: 'iPhone 6',
nativeInstrumentsLib: true,
isolateSimDevice: true,
app: APP_PATH
}
}
}
For args
, you can specify keys in lowerCamel. Its values are interpreted as its value. If value is boolean, true
means specifying the key and false
means not specifying.
For example, platformVersion: '9.1'
will be converted to --platform-version=9.1
, sessionOverride: true
will be --session-override
, showIosLog: false
will specify nothing.
If NODE_ENV
environment variable is set to debug
, this service plugin dumps debug log to wdio_appium_service_debug_log.txt
.
This software is distributed under the MIT license.
FAQs
webdriver.io service to start & stop Appium server
The npm package wdio-appium-service receives a total of 4,812 weekly downloads. As such, wdio-appium-service popularity was classified as popular.
We found that wdio-appium-service demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.