
Security News
Scaling Socket from Zero to 10,000+ Organizations
Socket CEO Feross Aboukhadijeh shares lessons from scaling a developer security startup to 10,000+ organizations in this founder interview.
Invenio-Theme-TUW
Advanced tools
.. Copyright (C) 2020 - 2025 TU Wien.
Invenio-Theme-TUW is free software; you can redistribute it and/or
modify it under the terms of the MIT License; see LICENSE file for more
details.
This package belongs to the TU Wien suite of InvenioRDM customizations <https://gitlab.tuwien.ac.at/crdm>__ that make up TU Wien Research Data <https://researchdata.tuwien.ac.at>__.
It provides various frontend components to give it the distinct look and feel of TU Wien services. Also, it also brings some extra functionality and new endpoints.
Some of the features provided by this package:
Even though not strictly a provided feature, the extended testing setup is also noteworthy (see below).
After installing Invenio-Theme-TUW (e.g. via pip), Invenio's assets have to be updated:
.. code-block:: console
$ pip install invenio-theme-tuw # or another package manager $ invenio-cli assets build
To execute the tests, the project has to be installed locally.
Then, the run-tests.sh script can be executed.
.. code-block:: console
$ uv sync --all-extras $ source .venv/bin/activate $ ./run-tests.sh $ deactivate
In addition to the usual events like merge requests, the tests are run nightly via GitLab CI/CD.
The definition for the installed environment (uv.lock, also exported as requirements.txt) is provided as job artifacts to developers.
This makes it easier to diagnose breakage due to dependency upgrades.
Further, we're checking our overrides (like Jinja templates and JS) against the latest upstream definitions as part of the tests. In combination with the nightly tests, this provides us with an early warning system about changes that need chasing.
FAQs
TU Wien corporate design for InvenioRDM.
We found that Invenio-Theme-TUW demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh shares lessons from scaling a developer security startup to 10,000+ organizations in this founder interview.

Research
Socket Threat Research maps a rare inside look at OtterCookie’s npm-Vercel-GitHub chain, adding 197 malicious packages and evidence of North Korean operators.

Research
Socket researchers identified a malicious Chrome extension that manipulates Raydium swaps to inject an undisclosed SOL transfer, quietly routing fees to an attacker wallet.