
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
cf-compose-model
Advanced tools
[]( https://g.codefresh.io/repositories/codefresh-io/cf-com
Codefresh introducing CF-Compose-Model, our model for all compositions. Using our compose model you can:
Verify that your composition is valid on Codefresh.io
Convert Composition from one type to another
More examples can be found here:
node example.js
to run the basic examples we provided
'use strict';
const Promise = require('bluebird');
const path = require('path');
const CM = require('cf-compose-model');
const ComposeModel = CM.ComposeModel;
const path = './lib/model/tests/ComposeV1/ex1.yaml';
console.log(`\n#############################\nExample load yaml from location ${locapathtion}\n#############################`);
let location = path.resolve(__dirname, path);
return ComposeModel.load(location)
.then(compose => {
return compose.getWarnings();
})
.then((warnings) => {
console.log('\n===\nWarnings\n===');
return Promise.map(warnings, (warning) => {
console.log(warning.format());
});
})
.then(() => {
return cm.translate().toYaml();
})
.then((translated) => {
console.log('\n===\nOutput\n===');
console.log(translated);
});
npm install cf-compose-mode --save
ORnpm isntall
, yarn
also supportednpm run unit_test
npm run e2e_test
using the flow.yaml
ComposeModel holds inside 3 basic objects - each one of the objects holds in instances of CFNode
class:
More objects that ComposeModel holds:
translate
method. The defaultTranslator exist only if the ComposeModel parsed some yaml and a translator exist for it.Methods of ComposeModel:
parse
does.lib/model/policies
.onlyAutoFix
flag is set then only warnings with this flag will be fixed.FAQs
[]( https://g.codefresh.io/repositories/codefresh-io/cf-com
The npm package cf-compose-model receives a total of 69 weekly downloads. As such, cf-compose-model popularity was classified as not popular.
We found that cf-compose-model demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.