
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
assert-http
Advanced tools
Test helpers for testing a HTTP interface. This library contains two primary interfaces; a test runner which executes a set of HTTP calls as described by files in a directory, and a extension to the assert module.
With mocha, usage looks like;
describe('api server', function(done) {
fixtures.load('/path/to/tests/').forEach(function(test) {
it(test.name, function(done) {
fixtures.runtest(test, {handlers: handlers, clean: clean}, done);
});
});
});
Syncronous function that loads text fixtures from a directory. Returns an array of test objects.
Runs an individual test. Requires a test object (from assertHTTP.load), options object and callback function. The options object may contain the keys;
handlers; an object of keys and replacer methods for populating http requests. Handlers are async and have the function signature function(req, value, next)clean; an object of keys and replacer methods for sanitizing http response headers and body. Replacer methodes have the signature function(key, value, context)Call this method to notify assertHTTP to update fixtures as it runs.
Sync version of mkdirp
md5 helper.
A pixel-by-pixel comparison of two image buffers using the node-mapnik Image.compare() API. The options object may contain the keys:
threshold; tolerance level of RGB value difference between two pixels. Defaults to 16.diffsize; a float between 0-1 expressing the max allowed difference between buffer lengths. Defaults to 0.1.diffpx; a float between 0-1 expressing the max number of pixels allowed to exceed the threshold option. Defaults to 0.02.If res.clean is present it is expected to be a method that json.stringify can use to sanitize the response headers.
FAQs
HTTP test fixture helper
The npm package assert-http receives a total of 3 weekly downloads. As such, assert-http popularity was classified as not popular.
We found that assert-http demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 42 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.