Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
QualiPy is a framework for assisting with the automated testing process. Qualipy is not meant to replace pytest, behave, or other testing frameworks. Instead, it is meant to augment the process to provider further automation. It can be configured based on the needs of the project and the availablility of other technologies.
QualiPy features include:
QualiPy is built to use multiple testing frameworks via plugins. Currently, QualiPy supports the behave framework out of the box for business-driven development.
Like the testing plugins, QualiPy can also use multiple project management software suites (such as JIRA) via plugins.
In most cases, authentication needs to happen in order to interact with project management software suites. This interaction can use certificates, API keys, or simple username/password combinations. The difficult part is how to secure the credentials. For starters, a keyring authenticator is implemented that just uses the keyring functionality for the underlying OS.
In order to test using JIRA, you must have a running JIRA instance.
pip install qualipy
)python -m qualipy
)QualiPy looks for qualipy.yaml in the current directory. If that is not found, then default configuration settings are used. Additionally, other YAML config files can be used by including the --config-file command line argument.
QualiPy assumes that the feature files are located in the features directory in the current working directory. This can be changed with the --features-dir command line argument.
FAQs
Automated test process framework
We found that qualipy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.