Security News
PyPI’s New Archival Feature Closes a Major Security Gap
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
github.com/qlik-oss/enigma-go
enigma-go is a library that helps you communicate with a Qlik Associative Engine. Examples of use may be building your own analytics tools, back-end services, or other tools communicating with a Qlik Associative Engine. As an example Qlik Core provides an easy way to get started.
go get -u github.com/qlik-oss/enigma-go
Connecting to a Qlik Associative Engine (e.g Qlik Core) and interacting with a document/app involves at least the following steps:
Create and set up a Dialer object with TLS configuration, etc.
Open a WebSocket to the Qlik Associative Engine using the Dial function in the Dialer.
Open or create a document/app using openDoc or createApp.
Refer to the examples section for more information.
enigma-go includes generated API code that is based on the latest available Qlik Associative Engine schema. When a new schema is available, a new version of enigma-go will be made available.
To release a new version of enigma-go you have to be on the master branch. From there you can run the release.sh script. The usage is:
./release.sh <major|minor|patch>
where the argument specifies what should be bumped. The release-script does a couple of things.
0.1.0+12.429.0
.api-spec.json
file to a commit with the message Release: <version> for QIX schema version <qix_version>
.api-spec.json
to latest again.After the script has run, check the results. If everything looks good run:
git push --follow-tags
to push the tag and commit to master. The release-script also checks if the local repo is in a pristine state: no untracked files or uncommitted change and, you have to be up-to-date with the latest changes on master.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
Research
Security News
Malicious npm package postcss-optimizer delivers BeaverTail malware, targeting developer systems; similarities to past campaigns suggest a North Korean connection.
Security News
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.