Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
This package accesses data from the ACL Anthology.
Install via pip
:
$ pip install acl-anthology-py
Instantiate the library, automatically fetching data files from the ACL
Anthology repo (requires git
to be
installed on your system):
from acl_anthology import Anthology
anthology = Anthology.from_repo()
Some brief usage examples:
>>> paper = anthology.get("C92-1025")
>>> str(paper.title)
Two-Level Morphology with Composition
>>> [author.name for author in paper.authors]
[
Name(first='Lauri', last='Karttunen'),
Name(first='Ronald M.', last='Kaplan'),
Name(first='Annie', last='Zaenen')
]
>>> anthology.find_people("Karttunen, Lauri")
[
Person(
id='lauri-karttunen', names=[Name(first='Lauri', last='Karttunen')],
item_ids=<set of 30 AnthologyIDTuple objects>, comment=None
)
]
Find more examples and details on the API in the official documentation.
This package uses the Poetry packaging system.
Development is easiest with the just
command runner; running just -l
will list all available recipes, while just -n <recipe>
will print the commands that the recipe would run.
just check
will run black,
ruff,
mypy, and some other pre-commit hooks on all
files in the repo.
just install-hooks
will install pre-commit hooks so they run on every
attempted commit.just test-all
will run all tests except for tests that run on the full
Anthology data.
just test NAME
will only run test functions with NAME
in them.just test-integration
will run tests on the full Anthology data.just fix-and-test
(or just ft
for short) will run all checks and tests,
additionally re-running the checks on failure, so that the checking and
testing will continue even if some hooks have modified files.
The justfile defines several more useful recipes; list them with just -l
!
There are some benchmark scripts intended to be run with richbench:
poetry run richbench benchmarks/
just docs
generates the documentation in the site/
folder.just docs-serve
serves the documentation for local browsing.Docstrings are written in Google style as this supports the most features with the mkdocstrings handler (particularly compared to Sphinx/reST).
FAQs
A library for accessing the ACL Anthology
We found that acl-anthology-py demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.