Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@jupyterlite/cockle
Advanced tools
In-browser bash-like shell implemented in a combination of TypeScript and WebAssembly.
Used in the JupyterLite terminal extension.
⚠️ This is an early-stage work in progress and should be considered experimental code. Anything and everything could change at any time.
The commands used here are either built-in commands implemented in TypeScript, or WebAssembly
commands compiled into .js
and .wasm
files. The latter are built by
Emscripten-forge and are added to a deployment during the build process.
Emscripten-forge packages containing WebAssembly commands that are currently supported and tested are as follows. Each package contains a single commmand with the same name as the package unless otherwise specified:
coreutils
: multiple core commands including cat
, cp
, echo
, ls
, mkdir
, mv
, rm
, touch
, uname
, and wc
grep
lua
tree
vim
micromamba env create -f environment-dev.yml
micromamba activate cockle
npm install
npm run build
npm run lint:check
You can use conda
, mamba
or pixi
instead of micromamba
here. A copy of
micromamba
is installed into the cockle
environment; this is needed to support the
emscripten-wasm32
platform in the demo and tests.
The cockle
repository includes a demo so that you can easily try it out interactively in a web
browser. Once you have built cockle
, build and run the demo using:
cd demo
npm install
npm run build
npm run serve
then open a browser at the specified URL:
The test
directory contains playwright end-to-end tests which can be built and run as follows:
cd test
npm install
npx playwright install --with-deps chromium
npm run build
npm run test
npm run test:report
You can interactively run individual tests using npm run test:ui
.
In addition, the demo
directory contains separate visual tests that can be run in the same way.
Only Linux screenshots are stored within the repository.
0.0.13
FAQs
In browser bash-like shell
We found that @jupyterlite/cockle demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.