Spaces:
Sleeping
Sleeping
File size: 1,594 Bytes
d41b3c4 5d65650 d41b3c4 5d65650 d41b3c4 5a4123b | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 | # Testing
The suite uses `pytest` with `pytest-asyncio`; network calls (Numbeo, Yahoo, Frankfurter, currency-api) are mocked via `respx` and monkeypatching — no live requests.
```bash
uv sync --group dev # install test + audit dependencies
uv run pytest # run the suite
uv run pytest --cov # run with a coverage report
uv run pytest --cov --cov-report=html # HTML report in htmlcov/
uv run pip-audit # scan dependencies for known CVEs
```
## Layers & coverage
Latest run — **152 tests, 100% line coverage**, spanning four layers:
| Layer | File | Focus |
|---|---|---|
| Unit | `test_model/fx/currencies/data_sources/tax.py` | Model math, EMA blend, lookups, parsing, tax rates |
| Integration | `test_integration.py` | Full request → model → render pipeline |
| Regression | `test_regression.py` | Pins previously-fixed bugs |
| Security | `test_security.py` | Validation, XSS escaping, SSRF resistance |
| Endpoint | `test_app.py`, `test_tax.py` | Routes, validation, degradation |
| Module | Coverage |
|---|---|
| `app/currencies.py` | 100% |
| `app/tax.py` | 100% |
| `app/fx.py` | 100% |
| `app/model.py` | 100% |
| `app/data_sources.py` | 100% |
| `app/main.py` | 100% |
| **Total** | **100%** |
## Security
See [SECURITY_TEST.md](SECURITY_TEST.md) for the security review — findings rated by CVSS band and mapped to the OWASP Top 10. The dependency audit is clean after upgrading `python-multipart` / `starlette` / `idna` / `python-dotenv` (14 CVEs resolved); `pip-audit` is wired into the dev group to keep it that way.
|