Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Test Repository +++++++++++++++
.. image:: https://travis-ci.org/testing-cabal/testrepository.svg?branch=master :target: https://travis-ci.org/testing-cabal/testrepository
Overview
This project provides a database of test results which can be used as part of
developer workflow to ensure/check things like:
* No commits without having had a test failure, test fixed cycle.
* No commits without new tests being added.
* What tests have failed since the last commit (to run just a subset).
* What tests are currently failing and need work.
Test results are inserted using subunit (and thus anything that can output
subunit or be converted into a subunit stream can be accepted).
A mailing list for discussion, usage and development is at
https://launchpad.net/~testrepository-dev - all are welcome to join. Some folk
hang out on #testrepository on irc.freenode.net.
CI for the project is at https://travis-ci.org/testing-cabal/testrepository
Licensing
Test Repository is under BSD / Apache 2.0 licences. See the file COPYING in the source for details.
Quick Start
Create a config file::
$ touch .testr.conf
Create a repository::
$ testr init
Load a test run into the repository::
$ testr load < testrun
Query the repository::
$ testr stats
$ testr last
$ testr failing
Delete a repository::
$ rm -rf .testrepository
Documentation
More detailed documentation including design and implementation details, a user manual, and guidelines for development of Test Repository itself can be found at https://testrepository.readthedocs.org/en/latest, or in the source tree at doc/ (run make -C doc html).
FAQs
A repository of test results
We found that testrepository demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.