
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
flake8-mock
Advanced tools
Remember that a mock's job is to say, "You got it, boss" whenever anyone calls
it. It will do real work, like raising an exception, when one of its
convenience methods is called, like assert_called_once_with. But it won't
do real work when you call a method that only resembles a convenience method,
such as assert_called_once (no _with!). Sometimes developers may not
notice that they are using a non-existent mock method, because they are not
getting an output error telling them so. And for some reason they can also
forget to verify that the test cases fail before writing implementation code.
This plugin checks for possible non-existent mock methods when you run
flake8, the Python code checker.
Inspired by http://engineeringblog.yelp.com/2015/02/assert_called_once-threat-or-menace.html.
You can install or upgrade flake8-mock with these commands::
$ pip install flake8-mock $ pip install --upgrade flake8-mock
* ``assert_calls``
* ``not_called``
* ``called_once``
* ``called_once_with``
When both flake8 and flake8-mock are installed, the plugin is
available in flake8::
$ flake8 --version
5.0.4 (flake8-mock: 0.4, ...)
Once you run flake8, you can have something like::
$ flake8 test_file.py
test_file.py:27:1: M001 assert_calls is a non-existent mock method.
test_file.py:28:1: M001 called_once_with is a non-existent mock method.
test_file.py:39:1: M001 not_called is a non-existent mock method.
test_file.py:40:1: M001 assert_called is a non-existent mock method.
* `Alejandro Gabriel Pereira <https://github.com/aleGpereira>`_ is the main author.
* `Nejc Zupan <https://github.com/zupo>`_ (`Niteo <https://niteo.co>`_) provided the idea
and proof-reading.
* `John Vandenberg <https://github.com/jayvdb>`_
* `Tom Prince <https://github.com/tomprince>`_
* `Gasper Vozel <https://github.com/karantan>`_
* `Bjørnar Myrheim <https://github.com/myrheimb>`_
0.4 (05-12-2023)
* Fix compatibility with flake8 >= 5.0.0.
0.3 (09-10-2016)
assert_not_called, assert_called or assert_called_once.0.2 (12-16-2015)
* Add Python 3 compatibility.
0.1 (10-20-2015)
0.1dev0 (10-19-2015)
* First dev release.
FAQs
Provides checking for non-existent mock methods
We found that flake8-mock demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.