
Security News
Researcher Exposes Zero-Day Clickjacking Vulnerabilities in Major Password Managers
Hacker Demonstrates How Easy It Is To Steal Data From Popular Password Managers
A simple fixture to generate a for-realz Gemfile.lock with completely fake data.
Bundler has wonderful fixture tooling for testing itself, but it's pretty elaborate and hard (for a knucklehead like me) to re-use. I cobbled this together and wanted to re-use it elsewhere and decided to package it up separately.
Works with Bundler 1.7+
Add this line to your application's Gemfile:
gem 'bundler-fixture'
And then execute:
$ bundle
Or install it yourself as:
$ gem install bundler-fixture
require 'bundler/fixture'
bf = BundlerFixture.new(dir: Dir.tmpdir)
bf.create_lockfile(gem_dependencies: bf.create_dependency('foo', '1.4.5'))
BundlerFixture
takes the gem specs and builds an index with the contents, and sets up other dependencies so a Gemfile.lock
can be built reflecting the dependency tree in all of the passed specs with Bundler::Definition
. This ensures Bundler::LockfileParser
will be able to parse the file successfully, handy for testing your own code that's working programatically with its output.
After checking out the repo, run bin/setup
to install dependencies. Then, run rake spec
to run the tests. You can also run bin/console
for an interactive prompt that will allow you to experiment.
To install this gem onto your local machine, run bundle exec rake install
. To release a new version, update the version number in version.rb
, and then run bundle exec rake release
, which will create a git tag for the version, push git commits and tags, and push the .gem
file to rubygems.org.
Bug reports and pull requests are welcome on GitHub at https://github.com/chrismo/bundler-fixture.
The gem is available as open source under the terms of the MIT License.
FAQs
Unknown package
We found that bundler-fixture demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Hacker Demonstrates How Easy It Is To Steal Data From Popular Password Managers
Security News
Oxlint’s new preview brings type-aware linting powered by typescript-go, combining advanced TypeScript rules with native-speed performance.
Security News
A new site reviews software projects to reveal if they’re truly FOSS, making complex licensing and distribution models easy to understand.