Create test packages that simulate malicious behaviors we want to catch
Open
@elainechien is already working on this.
Since Jan 30, 2024.
- Dominant language
- Go
- Stars
- 912
- Forks
- 74
- PR merge metrics
- No merged PRs in 30d
Description
Having test packages will aid development and testing of new functionalities for package analysis since we can do more end to end testing on specific behaviors we want to catch. If we find reports of packages with malicious activity that package analysis missed, we should try to simulate that behavior in these test packages and add support for detecting those behaviors. The initial test package will be created in python, but we should consider creating test packages for multiple ecosystems.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.