
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A simple test-suite without dependencies.
import { TestGroup } from "yaf-test"
const func = (a: string = 'a') => a + 'sdf'
TestGroup.Area('Simple Tests', test => {
test('String compare', 'asdf').is('asdf')
test('Function compare', func).is(func)
test('Execute function', func).execute().is('asdf')
test('Execute function + arguments', func).execute(['b']).is('bsdf')
test('Compare Object', {a: {b: 'c'}}).equal({a: {b: 'c'}})
})

Each factory needs a label and item.
Nearly all methods return the Test instance so it is possible to chain them
is(what: any): Test strictly compares (===)
Throws IsNotError
isLike(what: any): Test compares (==)
Throws IsNotLikeError
equal(object: Object): Test checks if item is equal to object
Throws NotAnObject if item or object is not an Object
Throws NotEqual if item and object are not equal
inArray(array: any[]): Test checks if item is in array
Throws IsNotAnArray if array is not an array
Throws NotInArrayError if item is not in array
includes(what: any): Test checks if item includes what
Throws IsNotAnArray if item is not an array
Throws NotInArrayError if item does not include what
execute(...args: any): Test executes item
Throws NotAFunction if item is not a function
executeMethod(thisArg: Object, ...args: any): Test executes item with given this
Throws NotAFunction if item is not a function
failing(clearErrors: boolean = true) checks if errors occured and clears them if clearErrors is true
Throws NotFailing if no errors occured
FAQs
Simple test-suite without dependencies
The npm package yaf-test receives a total of 1 weekly downloads. As such, yaf-test popularity was classified as not popular.
We found that yaf-test demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.