Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Security News
Douglas Coburn
September 13, 2024
We’re excited to release first version of Socket’s Python Software Development Kit (SDK), now available on PyPI. Our SDK simplifies integrating Socket's security features into your Python applications by providing a user-friendly wrapper around the Socket REST API.
We designed this SDK to make it easier for our customers who user Python to integrate Socket into their workflows. It makes it possible for developers to easily retrieve detailed information on npm package issues, scores, dependencies, organization settings, and more.
Installing the Socket Python SDK is as simple as running:
pip install socket-sdk-python
Developers can then easily integrate the SDK into their projects, allowing them to streamline monitoring and managing package dependencies, retrieving security scores, viewing reports, and tracking issues. Detailed instructions for setting up and using the SDK can be found in the project description on PyPI, including all the available parameters and functions.
Check out our product changelog for all the information on the latest fixes and improvements. Moving forward, all updates will be published to the SDK’s package on PyPI. Feel free to get in touch if you have any feedback or suggestions. We would love to hear from you, as your input helps us continuously improve and tailor the SDK to better meet your security needs.
Subscribe to our newsletter
Get notified when we publish new security blog posts!
Try it now
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.