Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools oft miss.
A modular data warehouse system
Kazana is a data warehouse system framework. It provides high level APIs to extract, transform and index data for analysis.
See also: Glossary
Create a folder and create a package.json
mkdir myapp
cd myapp
npm init --yes
Add kazana
as dependency
npm install --save kazana
Add a "start" script to the package.json
{
"name": "myapp",
"scripts": {
"start": "kazana"
},
"dependencies": {
"kazana": "^8.4.0"
}
}
Create myapp/index.js
with the following content:
module.exports = {
name: 'myapp',
version: '1.0.0'
}
In future, that will be enough, but for now the public
option must be set,
see https://github.com/eHealthAfrica/kazana/issues/195.
So add a public option like this:
module.exports = {
name: 'myapp',
version: '1.0.0',
public: 'public'
}
And create a public/index.html
file with
this content.
Now start the app
npm start
You need to create a test user at http://localhost:4999/_utils/#/database/_users/new
with this content
{
"_id": "org.couchdb.user:kazana-admin@example.com",
"type": "user",
"name": "kazana-admin@example.com",
"roles": [
"kazana-id:testadmin",
"kazana-data-provider",
"kazana-data-reviewer",
"kazana-analyst",
"kazana-admin"
],
"password": "secret",
"createdAt": "2016-01-01T00:00:00.000Z",
"fullname": "Test Admin"
}
Now start the app
npm start
Once running, you can open http://localhost:5000. It will show a simple html app that lets you submit data.
Congratulations, you have built your first Kazana app and can already start accepting data submissions!
What’s next?
Quick deployments
Kazana accepts all kind of data out of the box through its generic REST API and client SDKs.
Iterative development
Transform scripts are not required to accept raw data reports, they simply start integrating existing raw data when they are ready.
Tiny core, many plugins
Instead of a monolithic architecture, Kazana is focussed on a tiny core with great code quality and stability. Context-specific features can be added with plugins.
✸ Work in progress
Kazana is a server built on top of the Hapi framework and uses CouchDB as its data store✸.
A Kazana app is defined by a Kazana Manifest. It’s the app’s main file (index.js
by default) and exports an object with pre-defined properties. A minimal manifest looks like this:
module.exports = {
name: 'myapp'
}
Starting the app will serve a generic app for data submissions at http://localhost:5000. (TODO: https://github.com/eHealthAfrica/kazana/issues/195)
✸ Kazana spawns a PouchDB Server as a CouchDB drop-in replacement by default, unless otherwise configured, so CouchDB is not a hard requirement for development, but recommended for production use.
git clone git@github.com:eHealthAfrica/kazana.git
cd kazana
npm install
npm test
CI test with selenium / chrome
npm run test:ci
CI test with Saucelabs
SAUCE_USERNAME=*** SAUCE_ACCESS_KEY=*** TEST_CLIENT="saucelabs:internet explorer:10:Windows 8" npm run test:ci
Brought to you by eHealth Africa — good tech for hard places.
FAQs
A modular data warehouse system
The npm package kazana receives a total of 2 weekly downloads. As such, kazana popularity was classified as not popular.
We found that kazana demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools oft miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.