Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Pytest extension to generate SVG badge files with pytest stats (number of tests passed, pytest-cov
coverage statistics.)
Everyone likes pretty code status badges. However, hosting them can get bit troublesome when working on private projects.
This pytest plugin sidesteps the problem by generating local badge files that you can simply add to the project repository and reference in the README.md
directly.
Having a bit of extra noise in your change history is worthy cost of having pretty badges, right?
pip install pytest-local-badge
The only thing you have to tell the plugin is where to store badges:
pytest --local-badge-output-dir badges/
All supported badges will be stored that directory. You can find the complete list of supported options by calling pytest -h
and looking for all configuration parameters starting with --local-badge-*
.
Here are the options available at the moment:
--no-local-badge Disable the local badge plugin.
--local-badge-output-dir=LOCAL_BADGE_OUTPUT_DIR
The directory to save local badges to.
--local-badge-generate={cov,status} [{cov,status} ...]
List of local badges to generate.
--local-badge-status-file-name=LOCAL_BADGE_STATUS_FILE_NAME
Desired output file name
--local-badge-cov-file-name=LOCAL_BADGE_COV_FILE_NAME
Desired output file name
status
-- Number of tests (total & passed)cov
-- Coverage report as per pytest-cov
plugin (the pytest-cov
must be installed separately.)FAQs
Generate local badges (shields) reporting your test suite status.
We found that pytest-local-badge demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.