dennisdoomen / packageguard / 23662511870

78%

Build Type

push

github

Committed by Dennis Doomen

Commit Message

Improve test coverage for risk evaluators and enrichers

- Add 17 unit tests to RiskEvaluatorSpecs covering all previously
  untested branches in SecurityRiskEvaluator, LegalRiskEvaluator,
  and all six risk factors (ReleaseHealth, Documentation,
  ContributorHealth, PackageAdoption, etc.)
- Add DependencyHealthCountEnricherSpecs with 11 unit tests covering
  stale/abandoned/deprecated/unmaintained-critical counting, nested
  transitive deps, diamond deduplication, missing keys, and circular
  dependency safety
- Add TransitiveVulnerabilityCountEnricherSpecs with 7 unit tests
  covering vulnerable dep counting, nested transitive, multi-dep,
  diamond deduplication, missing keys, and circular dependency safety
- Add 6 integration tests to ParallelPackageRiskEnricherSpecs using
  real GitHub/OSV APIs (marked [TestCategory("Integration")]):
  OsvRiskEnricher, LicenseUrlRiskEnricher, GitHubRepositoryRiskEnricher,
  full pipeline, known vulnerable version (Newtonsoft.Json 12.0.3),
  and npm ecosystem (lodash 4.17.11)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Run Details

1611 of 2270 branches covered (70.97%)

Branch coverage included in aggregate %.

4485 of 5546 relevant lines covered (80.87%)

872.91 hits per line