PSPDFKit-labs/bypass

This system is a testing utility library for Elixir that allows developers to mock HTTP servers for unit and integration tests. It manages the lifecycle of mock HTTP endpoints, supporting features like temporary server shutdown, concurrent request handling, and compatibility with both ExUnit and ESpec test frameworks. The implementation has been modernized to use GenServer-based instance management and dynamic supervision, replacing older agent and supervisor patterns.

The Bypass library has been refactored to use a DynamicSupervisor for managing instances, replacing the previous supervisor strategy. This change introduces Bypass.up/1 and Bypass.down/1 functions, allowing users to temporarily take down and re-open the HTTP server. Additionally, the library now supports ESpec alongside ExUnit for test framework integration, and provides more specific error messages when unexpected HTTP requests occur or expectations are not met.

lib · high confidence

The Bypass library has been refactored to replace the previous Agent-based state management with a GenServer-driven architecture (Bypass.Instance) that manages HTTP server lifecycle, route expectations, and concurrent request handling. This change introduces support for temporary server shutdown (Bypass.down/up), configurable listen interfaces, and improved error handling for HTTP requests. The application supervisor now uses DynamicSupervisor instead of the deprecated Supervisor.Spec, and the plug implementation has been updated to interact with the new instance model, enabling more robust testing of HTTP endpoints with features like exact request counting and PATCH method support.

lib/bypass · high confidence

The configuration file was migrated from the deprecated Mix.Config module to the modern Config module, reflecting Elixir 1.16+ standards. Additionally, the default logging configuration was updated to include the process ID in console output, and the Bypass application was explicitly configured to use ExUnit as the test framework.

config · high confidence

The project's README was significantly expanded to include usage examples, configuration options, and integration with ESpec, while also adding a .formatter.exs for code formatting, a CHANGELOG.md for version history, and an updated LICENSE file with the current year.

(repo-wide) · high confidence

Added tests for Bypass lifecycle and concurrency, including verifying that Bypass.down waits for the plug to terminate, handling concurrent requests, and testing closing a bypass while a request is in-flight.

test · high confidence

The project now requires Elixir 1.7+ and upgrades the HTTP server dependency from the direct Cowboy 1.0 to the Plug.Cowboy 2.0 adapter, which bundles the latest compatible versions of Cowboy and Plug. This change also updates the Ranch dependency to 1.7.1 and introduces new dev/test dependencies including ESpec, Dialyxir, and Mint, while removing the older Gun dependency.

(dependencies) · medium confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 57 → 62 (+5.2)
• Rubric changed (rubric-2026.08.19 → rubric-2026.09.15) — scores are not directly comparable.

• Code Health 100 → 100 (+0.0)
• Architecture 69 → 69 (+0.0)
• Maturity 50 → 50 (+0.0)
• Readiness 50 → 66 (+16.8)
• Security 80 → 90 (+9.9)

• Coverage not included — suite not readable by the collector
• Dependency hygiene not measured — no supported dependency manifest was read
• High CVE: [GHSA redacted] (mix.lock)
• High CVE: [GHSA redacted] (mix.lock)
• High CVE: [GHSA redacted] (mix.lock)
• High CVE: [GHSA redacted] (mix.lock)
• High CVE: [GHSA redacted] (mix.lock)
• High: security finding (details withheld)
• High: security finding (details withheld)
• No exposed public API
• Test reliability not included
• The README does not mention the supported Erlang OTP versions or how to set up Elixir 1.10. (README.md)
• dormant codebase — no living knowledge left to concentrate

• Documentation: no installation or build instructions (README.md)
• High CVE: [GHSA redacted] (mix.lock)
• High CVE: [GHSA redacted] (mix.lock)
• High CVE: [GHSA redacted] (mix.lock)
• High CVE: [GHSA redacted] (mix.lock)
• High CVE: [GHSA redacted] (mix.lock)
• High: security finding (details withheld)
• High: security finding (details withheld)
• Medium: security finding (details withheld)
• Medium: security finding (details withheld)
• No dependency advisory monitoring
• Outdated: dialyxir
• Outdated: espec
• Outdated: ex_doc
• Outdated: mint
• Outdated: plug
• Outdated: plug_cowboy

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

PSPDFKit-labs/bypass was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.