
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
WAUnit is a testing framework for Google Analytics (other platforms coming soon).
When you setup custom tracking for a website you have to validate if the hits are correct, HitInspect automates the verification of tracking specifications.
Watch the Youtube video 'WAUnit Overview <https://www.youtube.com/watch?v=sWsPey1qBi0>
_'.
In a nutshell this is how it works:
.. image:: https://cloud.githubusercontent.com/assets/1695738/13732067/df23460a-e936-11e5-8dfe-64c628f59628.png
Install WAUnit using pip. Notice a core requirement is mitmproxy. Be sure to install SSL certificates <http://mitmproxy.org/doc/certinstall.html>
_ for mitmproxy so the proxy can capture SSL traffic.
.. code::
python pip install WAUnit
If you are not familiar with Selenium read the getting started <http://selenium-python.readthedocs.org/getting-started.html>
_ with Selenium Python Bindings. Watch the Youtube video 'Getting Started with WAUnit <https://www.youtube.com/watch?v=sWsPey1qBi0>
_'
wunit.cfg
.. code::
[WAUnit] Only googleanalyticsuniversal is available right now parser = googleanalyticsuniversal
[Proxy] host = 127.0.0.1 port = 8080 hitsdb = hitsdata
Drop me a line at @joaocorreia <http://twitter.com/joaocorreia>
_
FAQs
Web analytics unit testing framework
We found that waunit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.