testing-qa.md

🧪 Testing & QA Reliability

End-to-end testing runners, mock servers, contract validation, security auditing, and test automation.

← Back to Main Directory • 🌐 Live Search App • ➕ Submit New Resource

Jump to Subcategory: API Mocking & Sandboxes • API Testing & Debugging • Browser & E2E Testing • Contract & Schema Testing • Performance & Load Testing • Security & Vulnerability Scanners • Test Data Generation • Unit & Integration Testing

---

API Mocking & Sandboxes (6)

Tool	Language	License	Description	Links
Mockoon	TypeScript	MIT	The easiest and quickest way to design and run mock REST APIs locally with custom routes, rules, and proxies.	GitHub
MSW (Mock Service Worker)	TypeScript	MIT	Seamless REST and GraphQL API mocking library for browser and Node.js using Service Worker API to intercept requests at the network level.	GitHub
WireMock	Java	Apache-2.0	Flexible simulator and mock server for HTTP-based APIs with support for record/playback and stateful scenarios.	GitHub
Prism	TypeScript	Apache-2.0	Open-source HTTP mock server that generates realistic mock servers directly from OpenAPI and JSON Schema specs.	GitHub
MockServer	Java	Apache-2.0	Enables easy mocking of any system you integrate with via HTTP or HTTPS with expectations and verifications.	GitHub
⭐ JSON-Server	TypeScript	MIT	Get a full fake REST API with zero coding in less than 30 seconds from a single JSON file.	GitHub

API Testing & Debugging (5)

Tool	Language	License	Description	Links
Bruno	JavaScript	MIT	Fast, git-friendly, open-source API client that stores collections directly in your repo via plain text files.	GitHub
Hoppscotch	TypeScript / Vue	MIT	Open-source API development ecosystem, lightweight web & desktop app with WebSocket, GraphQL, and SSE support.	GitHub
Insomnia	TypeScript / Electron	Apache-2.0	Leading open-source API development and debugging platform for GraphQL, REST, WebSockets, and gRPC.	GitHub
Newman	JavaScript	Apache-2.0	Postman's collection runner CLI allowing you to run and test Postman collections directly in CI/CD pipelines.	GitHub
RestAssured	Java	Apache-2.0	Java DSL for easy testing of REST services, bringing the simplicity of dynamic languages into Java.	GitHub

Browser & E2E Testing (18)

Tool	Language	License	Description	Links
⭐ AutoHeal-QA	TypeScript	MIT	100% Free & Local-first agentic self-healing E2E test runner for Playwright. cloud cost with AST auto-patching and verification loop.	GitHub
Agent QA	TypeScript	FSL-1.1-ALv2	Self-improving QA agent for natural-language web and mobile tests, with a local dashboard and CLI.	GitHub
Playwright	TypeScript	Apache-2.0	Fast and reliable end-to-end testing framework for modern web apps across Chromium, Firefox, and WebKit.	GitHub
Cypress	JavaScript / TypeScript	MIT	Fast, easy, and reliable end-to-end testing framework for anything that runs in a web browser.	GitHub
Axe-core	TypeScript	MPL-2.0	Accessibility testing engine for websites and HTML-based user interfaces with zero false positives.	GitHub
Taiko	JavaScript	Apache-2.0	Node.js library to automate Chromium browsers with a clear, human-readable API and smart element locators.	GitHub
⭐ Puppeteer	TypeScript	Apache-2.0	Google's Node.js library which provides a high-level API to control Chrome/Chromium over the DevTools Protocol.	GitHub
Selenium	Java / Python / JS	Apache-2.0	Industry-standard browser automation framework and ecosystem supporting multiple browsers and programming languages.	GitHub
Appium	JavaScript	Apache-2.0	Cross-platform automation framework for native, hybrid, and mobile web apps on iOS, Android, and Windows.	GitHub
⭐ Maestro	Kotlin	Apache-2.0	Painless mobile UI automation framework for Android and iOS with declarative YAML test flows.	GitHub
Detox	JavaScript	MIT	Gray box end-to-end testing and automation library for React Native mobile applications.	GitHub
WebdriverIO	TypeScript	MIT	Next-gen browser and mobile automation test framework for Node.js with native WebDriver and CDP support.	GitHub
Nightwatch.js	JavaScript	MIT	Integrated end-to-end testing framework powered by Node.js and W3C Webdriver API.	GitHub
Pa11y	JavaScript	LGPL-3.0	Automated accessibility testing tool that runs via CLI or Node.js to uncover WCAG compliance errors.	GitHub
BackstopJS	JavaScript	MIT	Catch visual regressions in web apps across responsive screen resolutions and DOM interactions.	GitHub
Pixelmatch	JavaScript	ISC	The smallest, simplest and fastest JavaScript pixel-level image comparison library with anti-aliasing detection.	GitHub
Loki	JavaScript	MIT	Visual regression testing for Storybook stories across Chrome and Android with Git diffs.	GitHub
Lost-Pixel	TypeScript	MIT	Open source visual regression testing engine for Storybook, Next.js, Ladle, and standalone websites.	GitHub

Contract & Schema Testing (5)

Tool	Language	License	Description	Links
Pact	TypeScript	MIT	Consumer-driven contract testing library for microservices, HTTP APIs, and asynchronous message queues.	GitHub
PactumJS	JavaScript	MIT	Next-generation REST API automation testing framework for all levels in a test pyramid with mock support.	GitHub
Karate Framework	Java	MIT	Unified open-source test automation framework combining API testing, mocks, performance testing, and UI automation.	GitHub
Dredd	JavaScript	MIT	Language-agnostic command-line tool for validating API description documents against backend implementation.	GitHub
Schemathesis	Python	MIT	Modern API testing tool that finds crashes and bugs using property-based testing and OpenAPI specifications.	GitHub

Performance & Load Testing (11)

Tool	Language	License	Description	Links
k6	Go	AGPL-3.0	Modern load testing tool, using Go and JavaScript, for testing system performance and reliability.	GitHub
Artillery	JavaScript	MPL-2.0	Cloud-scale load testing and functional testing platform for HTTP, WebSockets, and gRPC.	GitHub
Locust	Python	MIT	Scalable user load testing tool written in Python with real-time web monitoring UI.	GitHub
Vegeta	Go	MIT	Versatile HTTP load testing tool and library built in Go for drilling HTTP services with constant request rates.	GitHub
Lighthouse CI	JavaScript	Apache-2.0	Automated tool suite for running Lighthouse audits in CI/CD to prevent performance and accessibility regressions.	GitHub
Autocannon	JavaScript	MIT	Fast HTTP/1.1 benchmarking tool written in Node.js, capable of generating massive request throughput.	GitHub
Gatling	Java / Scala	Apache-2.0	High-performance load testing tool built on Akka and Netty with expressive DSL in Java, Kotlin, and Scala.	GitHub
JMeter	Java	Apache-2.0	Apache's pure Java desktop application designed to load test functional behavior and measure performance.	GitHub
Wrk	C	Apache-2.0	Modern HTTP benchmarking tool capable of generating significant load when run on a single multi-core CPU.	GitHub
Hey	Go	Apache-2.0	Tiny and fast command line load generator for web applications, a modern replacement for ApacheBench (ab).	GitHub
Drill	Rust	GPL-3.0	HTTP load testing tool written in Rust, inspired by Ansible syntax with support for benchmark assertions.	GitHub

Security & Vulnerability Scanners (10)

Tool	Language	License	Description	Links
Trivy	Go	Apache-2.0	Comprehensive security scanner for container images, file systems, Git repositories, and Kubernetes manifests.	GitHub
Semgrep	OCaml / Python	LGPL-2.1	Fast, lightweight static analysis engine for finding bugs, enforcing secure coding standards, and auditing ASTs.	GitHub
SonarQube Community	Java	LGPL-3.0	Continuous inspection engine for code quality, architectural hotspots, and security vulnerabilities across 30+ languages.	GitHub
Checkov	Python	Apache-2.0	Static code analysis tool for infrastructure as code (Terraform, CloudFormation, Kubernetes, Dockerfile).	GitHub
Hadolint	Haskell	GPL-3.0	Smarter Dockerfile linter that helps you build best-practice Docker images by parsing AST rules.	GitHub
Bandit	Python	Apache-2.0	Security linter designed to find common security issues in Python code using AST node analysis.	GitHub
Brakeman	Ruby	CC-BY-NC-SA-4.0	Static analysis tool which checks Ruby on Rails applications for security vulnerabilities.	GitHub
Safety-CLI	Python	MIT	Checks Python dependencies against known security vulnerabilities from CVE databases.	GitHub
⭐ OWASP ZAP	Java	Apache-2.0	The world's most widely used web app scanner, free and open-source automated penetration testing tool.	GitHub
⭐ Nuclei	Go	MIT	Fast and customizable vulnerability scanner based on simple YAML-based templates from ProjectDiscovery.	GitHub

Test Data Generation (3)

Tool	Language	License	Description	Links
Faker	TypeScript	MIT	Generate massive amounts of realistic mock data in Node.js and the browser for robust testing environments.	GitHub
Mimesis	Python	MIT	High-performance Python library for generating realistic synthetic data in a variety of locales.	GitHub
Bogus	C#	MIT	A simple and sane fake data generator for .NET languages, ported from Faker.js with fluent syntax.	GitHub

Unit & Integration Testing (4)

Tool	Language	License	Description	Links
Vitest	TypeScript	MIT	Blazing fast Vite-native unit test framework with ESM, TypeScript, and out-of-the-box coverage.	GitHub
Jest	TypeScript	MIT	Delightful JavaScript testing framework with a focus on simplicity, snapshots, and zero configuration.	GitHub
Stryker	TypeScript	Apache-2.0	Mutation testing framework for JavaScript and TypeScript to ensure your unit test suite actually catches bugs.	GitHub
⭐ Testcontainers	Java	MIT	Java library that supports JUnit tests, providing lightweight throwaway instances of Docker databases.	GitHub