Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Empiric provides a semantic DSL to construct a fluent interface for test execution libraries.
This fluent interface promotes the idea of compressibility of your test logic, allowing for more factoring, more reuse, and less repetition. You can use Symbiote directly as an automated test library or you can use it with other tools such as RSpec, Cucumber, or anything else that allows you to delegate down to a different level of abstraction.
Note that Empiric is currently being put together as part of a series of classes I am teaching on micro-framework construction for modern testing practices.
To get the latest stable release, add this line to your application's Gemfile:
gem 'empiric'
To get the latest code:
gem 'empiric', git: 'https://github.com/jeffnyman/empiric'
After doing one of the above, execute the following command:
$ bundle
You can also install Empiric just as you would any other gem:
$ gem install empiric
Probably the best way to get a feel for the current state of the code is to look at the Empiric test script. If you clone the repository, you can see this script in action by running the command rake scripts:simple
.
More details will be forthcoming as the project evolves.
After checking out the repo, run bin/setup
to install dependencies. Then, run bundle exec rake spec:all
to run the tests. You can also run bin/console
for an interactive prompt that will allow you to experiment.
The default rake
command will run all tests as well as a RuboCop analysis.
To install this gem onto your local machine, run bundle exec rake install
.
Bug reports and pull requests are welcome on GitHub at https://github.com/jeffnyman/empiric. The testing ecosystem of Ruby is very large and this project is intended to be a welcoming arena for collaboration on yet another testing tool. As such, contributors are very much welcome but are expected to adhere to the Contributor Covenant code of conduct.
To contribute to Empiric:
git checkout -b my-new-feature
)git commit -am 'new feature'
)git push origin my-new-feature
)Empiric is distributed under the MIT license. See the LICENSE file for details.
FAQs
Unknown package
We found that empiric demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.