Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
highlights-scraper
Advanced tools
Scrape Kindle highlights from public Goodreads pages (example).
npm install --save highlights-scraper
const {scrapeHighlights} = require("highlights-scraper");
const url = "https://www.goodreads.com/notes/69252350-max-heinritz";
scrapeHighlights(url).then(
highlights => console.log(highlights),
error => console.error(error)
);
npm run scrape -- https://www.goodreads.com/notes/69252350-max-heinritz
[
{
link: string,
title: string,
author: string,
highlights: [string],
},
...
]
[
{
link: 'https://www.goodreads.com/notes/19028079-a-splendid-exchange/69252350-max-heinritz?ref=abp',
title: 'A Splendid Exchange: How Trade Shaped the World',
author: 'William J. Bernstein',
highlights: [
'Although world trade grew in tandem with the technological innovations of land and sea transport, political stability was even more important.',
'To this day, success or failure in the global marketplace depends not on size but on advanced political, legal, and financial institutions;'
]
},
{
link: 'https://www.goodreads.com/notes/20576437-crossing-to-safety/69252350-max-heinritz?ref=abp',
title: 'Crossing to Safety (Modern Library Classics)',
author: 'Wallace Stegner',
highlights: [
'It is a relationship that has no formal shape, there are no rules or obligations or bonds as in marriage or the family, it is held together by neither law nor property nor blood, there is no glue in it but mutual liking. It is therefore rare.',
'She’s simply incredible, the way she can organize a day. But one thing, I don’t think I ever saw her pick up one of those cute kids and give him a big squeeze, just because he’s himself, and hers, and she loves him. When we get ours, don’t let me have an agenda every time I’m with him.”',
],
},
]
FAQs
Scrapes public Kindle highlights on Goodreads.
We found that highlights-scraper demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.