Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
The pytest-cli-fixtures
plugin provides a way
to automatically register fixtures
based off of command line argument definitions.
This plugin will also allow
mandatory arguments to be omitted from the command line
when tests don't use the fixtures
that they are associated with.
There is only one hook function that is needed to use CLI fixtures:
def pytest_add_cli_fixtures(parser):
...
This hook is similar to the built-in pytest_addoption
hook,
and the parser
object that is provided
is the same as in the built-in hook.
Note: Like the built-in pytest_addoption
hook,
the pytest_add_cli_fixtures
hook
should only be implemented
in plugins, or in conftest.py
.
This plugin is available on PyPI:
> pip install pytest-cli-fixtures
Note: This plugin requires pytest version 7.0 or later.
The following conftest.py
defines
a --value
argument within the my args
group.
Since it specifies a dest
,
the fixture relating to the value
will be called my_val
.
The argument specifies required=True
,
meaning that pytest
will return an error
if a test uses the my_val
fixture
but --value
isn't specified on the command line.
# conftest.py
def pytest_add_cli_fixtures(parser):
group = parser.getgroup('my args')
group.addoption('--value', dest='my_val', type=int, required=True)
With the following test file,
the --value
argument must be specified
or pytest
will return an error.
Alternatively, filters would need to be used
to exclude the test that uses the CLI fixture.
# test_something.py
def test_something_else():
assert 1 + 2 == 3
def test_value(my_val):
assert 1 + my_val == 3
> pytest example
=================================== test session starts ====================================
platform win32 -- Python 3.10.5, pytest-7.1.2, pluggy-1.0.0
rootdir: C:\...\pytest-cli-fixtures, configfile: pytest.ini
plugins: cli-fixtures-1.0
collected 2 items
================================== no tests ran in 0.01s ===================================
ERROR: usage: pytest [options] [file_or_dir] [file_or_dir] [...]
pytest: error: the following arguments are required: --value
> pytest example -k 'not test_value'
=================================== test session starts ====================================
platform win32 -- Python 3.10.5, pytest-7.1.2, pluggy-1.0.0
rootdir: C:\...\pytest-cli-fixtures, configfile: pytest.ini
plugins: cli-fixtures-1.0
collected 2 items / 1 deselected / 1 selected
example\test_something.py . [100%]
============================= 1 passed, 1 deselected in 0.02s ==============================
> pytest example --value=2
=================================== test session starts ====================================
platform win32 -- Python 3.10.5, pytest-7.1.2, pluggy-1.0.0
rootdir: C:\...\pytest-cli-fixtures, configfile: pytest.ini
plugins: cli-fixtures-1.0
collected 2 items
example\test_something.py .. [100%]
==================================== 2 passed in 0.03s =====================================
FAQs
Automatically register fixtures for custom CLI arguments
We found that pytest-cli-fixtures demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.