Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
This project backports the pytest
environment for CKAN from CKAN 2.9 to CKAN
2.8. This allows CKAN extension developers to test CKAN plugins built to
work with CKAN 2.8 as well as CKAN 2.9 or newer using a single unified test
suite.
To use this in your project:
pytest
pytest_ckan
will
be used insteadTo use this plugin to test your CKAN extension, simply install this library to your development / testing environment:
pip install pytest-ckan
If you maintain a dev-requirements.txt
or test-requirements.txt
file you
can add this library to it.
To enable CKAN testing, simply add --ckan-ini=<path/to/test.ini>
to your
pytest
command, for example:
pytest --ckan-ini=test.ini ckanext/yourextension/tests
TBD;
For now, see CKAN 2.9's extension testing guide for some examples.
This work is largely based on @wardi's work for ckanext-scheming. It has been extracted so it can be re-used by other CKAN extensions.
ckanext-scheming is copyright (c) Her Majesty the Queen in Right of Canada, represented by the President of the Treasury Board, 2013-2018
This plugin is free software districuted under the terms of the MIT License. See COPYING for details.
Copyright 2020 (c) Viderum Inc. / Datopian
FAQs
Backport of CKAN 2.9 pytest plugin and fixtures to CAKN 2.8
We found that pytest-ckan demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.