Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@jupyterlab/running-extension
Advanced tools
An extension for JupyterLab which provides an entry point and commands for the @jupyterlab/running package.
See the JupyterLab 2.1 milestone on GitHub for the full list of pull requests and issues closed.
blacklist and whitelist support <extension_listings>
for the
extension manager
(#7989)Added a context menu item for opening a Markdown editor from the Markdown preview (#7942)
Added a command to replace the selection in an editor with text (inserting if there is no selection). This can be assigned a keyboard shortcut, as shown below. We also added a command to go through a series of commands and run the first enabled command. (#7908) Here is a keyboard shortcut to insert text in a currently-active notebook editor:
{
command: "notebook:replace-selection",
selector: ".jp-Notebook",
keys: ["Ctrl L"],
args: {text: "lambda x: x"}
}
Here is a keyboard shortcut to insert text into an editor of the currently active console, file editor, or notebook:
{
command: "apputils:run-first-enabled",
selector: "body",
keys: ["Ctrl L"],
args: {
commands: [
"console:replace-selection",
"fileeditor:replace-selection",
"notebook:replace-selection",
],
args: {text: "lambda x: x"}
}
}
NotebookWidgetFactory
is now a plugin so it can be overridden
(#8066,
#7996)LabIcon
: work with all SVG loaders, improve
performance, fix issue with menus from extensions
(#8125)data-jp-suppress-context-menu
attribute
(#7877,
#7670).yarnrc
configuration with
the Python package
(#8045)FAQs
JupyterLab - Running Sessions Extension
The npm package @jupyterlab/running-extension receives a total of 8,847 weekly downloads. As such, @jupyterlab/running-extension popularity was classified as popular.
We found that @jupyterlab/running-extension demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.