
Security News
NIST Officially Stops Enriching Most CVEs as Vulnerability Volume Skyrockets
NIST will stop enriching most CVEs under a new risk-based model, narrowing the NVD's scope as vulnerability submissions continue to surge.
@descarteslabs/jupyterlab_studio
Advanced tools
A JupyterLab extension for accessing GitHub repositories.
When you install this extension, an additional filebrowser tab will be added to the left area of JupyterLab. This filebrowser allows you to select GitHub organizations and users, browse their repositories, and open the files in those repositories. If those files are notebooks, you can run them just as you would any other notebook. You can also attach a kernel to text files and run those. Basically, you should be able to open any file in a repository that JupyterLab can handle.
Here is a screenshot of the plugin opening this very file on GitHub:

This is not an extension that provides full GitHub access, such as saving files, making commits, forking repositories, etc. For it to be so, it would need to more-or-less reinvent the GitHub website, which represents a huge increase in complexity for the extension.
This extension has both a client-side component (that is, Javascript that is bundled with JupyterLab), and a server-side component (that is, Python code that is added to the Jupyter notebook server). This extension will work with out the server extension, with a major caveat: when making unauthenticated requests to GitHub (as we must do to get repository data), GitHub imposes fairly strict rate-limits on how many requests we can make. As such, you are likely to hit that limit within a few minutes of work. You will then have to wait up to an hour to regain access.
For that reason, we recommend that you take the time and effort to set up the server extension as well as the lab extension, which will allow you to access higher rate-limits. This process is described in the installation section.
As discussed above, this extension has both a serverextension and a labextension. We recommend installing both so as to not be rate-limited. The purpose of the serverextension is to add GitHub credentials that you will need to acquire from https://github.com/settings/developers, and then to proxy your request to GitHub.
To install the labextension, enter the following in your terminal:
jupyter labextension install @jupyterlab/github
With only this installed, the extension should work, and you can experience the joys of being rate-limited first-hand!
There are two approaches to getting credentials from GitHub: (1) you can get an access token, (2) you can register an OAuth app. The second approach is not recommended, and will be removed in a future release.
You can get an access token by following these steps:
Remember that this token is effectively a password for your GitHub account. Do not share it online or check the token into version control, as people can use it to access all of your data on GitHub.
This approach to authenticating with GitHub is deprecated, and will be removed in a future release. New users should use the access token approach. You can register an OAuth application with GitHub by following these steps:
It is important to note that the "Client Secret" string is, as the name suggests, a secret. Do not share this value online, as people may be able to use it to impersonate you on GitHub.
Install the serverextension using pip, and then enable it:
pip install jupyterlab_github
If you are running Notebook 5.2 or earlier, enable the server extension by running
jupyter serverextension enable --sys-prefix jupyterlab_github
You now need to add the credentials you got from GitHub to your notebook configuration file. Instructions for generating a configuration file can be found here Once you have identified this file, add the following lines to it: Once you have identified this file, add the following lines to it:
c.GitHubConfig.access_token = '< YOUR_ACCESS_TOKEN >'
where "< YOUR_ACCESS_TOKEN >" is the string value you obtained above.
If you generated an OAuth app, instead enter the following:
c.GitHubConfig.client_id = '< YOUR_CLIENT_ID >'
c.GitHubConfig.client_secret = '< YOUR_CLIENT_SECRET >'
where "< YOUR_CLIENT_ID >" and "< YOUR_CLIENT_SECRET >" are the app values you obtained above.
With this, you should be done! Launch JupyterLab and look for the GitHub tab on the left!
You can set the plugin to start showing a particular repository at launch time. Open the "Advanced Settings" editor in the Settings menu, and under the GitHub settings add
{
"defaultRepo": "owner/repository"
}
where owner is the GitHub user/org,
and repository is the name of the repository you want to open.
FAQs
JupyterLab viewer for studio service
We found that @descarteslabs/jupyterlab_studio demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
NIST will stop enriching most CVEs under a new risk-based model, narrowing the NVD's scope as vulnerability submissions continue to surge.

Company News
/Security News
Socket is an initial recipient of OpenAI's Cybersecurity Grant Program, which commits $10M in API credits to defenders securing open source software.

Security News
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.