npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2024 – Pkg Stats / Ryan Hefner

@contrast/loopback-test-bench

v3.15.0

Published

Intentionally vulnerable Loopback application

Downloads

9

Readme

@contrast/loopback-test-bench

An intentionally vulnerable loopback application.

Running Locally

Make sure you have Node.js installed or install a version of Node from nvm.

git clone https://github.com/Contrast-Security-OSS/NodeTestBenches.git # or clone your own fork
cd NodeTestBenches/loopback
npm install
npm start

Your app should now be running on localhost:3000.

Running with Contrast

Installation

See our documentation for installation instructions.

After installation, the agent can be run with npm run contrast. For more information on configuration and which technologies the agent supports, see our documentation.

Adding a shared vulnerability

Once you have added shared functionality to @contrast/test-bench-utils, you are ready to add an endpoint in the test bench application.

Create a server/boot/ruleName.js file and call the controllerFactory method:

'use strict';

const controllerFactory = require('../utils/controllerFactory');

module.exports = controllerFactory('ruleName');

Check the documentation for controllerFactory under server/utils/controllerFactory.js usage information.

Add a server/views/pages/ruleName.ejs file that includes the shared template from @contrast/test-bench-utils:

<% include ../../../node_modules/@contrast/test-bench-utils/public/views/ruleName.ejs %>

Now run the app and make sure everything works as expected!