Security News
PyPI’s New Archival Feature Closes a Major Security Gap
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
@polygraph/data-graph
Advanced tools
This library provides some data structures for representing graphs in various useful forms and converting among them. Additionally, it includes an interface for converting commonly understood resource operations into technical graph operations. These graph operations should be easier to implement in adapters. Additionally, they are easier to compose when merge conflicts arise.
I will likely separate the interface to operations part into its own library.
Nothing in here is aware of schemata. As such, edges in graphs will be represented as one way. It is up to adapter authors to ensure proper inverse connections.
This is the native polygraph format. All relationships link to fully resolved resources. This makes it the easiest data structure to crawl, but also the most cumbersome on memory.
Additionally, the base abstraction must be capable of converting to any other format. Likewise, other formats must be able to convert to the base format. This allows any format to be converted into any other, even at the expense of two conversions.
I would like to handle this via some registration process. Such a process would create a base graph factory with pairs of classes and functions to tranform base graphs into the corresponding class.
Takes resource operations and transforms them into graph operations.
Resource
: Something with an id, type, attributes, and relationships represented by other Resource
s.Resource Reference
: An id and type that points to a Resource
.Normalized Resource
: An id, type, attributes, and relationships represented by Resource Reference
s.Additionally anything with Like
appended to it, e.g., ResourceLike
means an object that conforms to the underlying type, but can contain extra properties.
* Does not have a corresponding Graph Operation (should it?) ** Requires a read operation
Vertex
: A vertex within a graph composed of an id, type, and attributes.Edge
: An edge connecting two vertices composed of a starting vertex, an ending vertex, and a type.Graph operations must be precise, so there are no types such as VertexLike
.
Care should be taken to use the terms precisely. There's a great deal of overlapping concepts, but the separation of the resource-oriented terminology a user of an adapter will encounter lacks some of the desirable qualities that the more technical graph operations convey. This will hopefully accomplish two goals:
FAQs
The DataGraph structure an associated functions.
The npm package @polygraph/data-graph receives a total of 1 weekly downloads. As such, @polygraph/data-graph popularity was classified as not popular.
We found that @polygraph/data-graph demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
Research
Security News
Malicious npm package postcss-optimizer delivers BeaverTail malware, targeting developer systems; similarities to past campaigns suggest a North Korean connection.
Security News
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.