Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Expose an AiiDA database according to the [OPTIMADE API specification](https://www.optimade.org).
The compatibility matrix below assumes the user always install the latest patch release of the specified minor version, which is recommended.
Plugin | AiiDA | Python | Specification |
---|---|---|---|
v1.2 < v2.0 | |||
v1.0 < v1.2 | |||
v0.18 <= v0.20 |
Latest release | Build status | Activity |
---|---|---|
This is a RESTful API server created with FastAPI that exposes an AiiDA database according to the OPTIMADE specification.
It is mainly used by Materials Cloud to expose access to archived AiiDA databases through the OPTIMADE API. But it may be freely implemented by any to fulfill a similar purpose.
The server is based on the test server "template" used in the optimade-python-tools
package.
Indeed, the filter grammar and parser and pydantic
models from optimade-python-tools
are used directly here.
Environment where AiiDA is installed.
AiiDA database containing StructureData
nodes, since these are the only AiiDA nodes that are currently exposed with this API (under the /structures
endpoint).
The package is relased on PyPI, hence you can install it by:
$ pip install aiida-optimade
Otherwise, you can also git clone
the repository from GitHub:
$ git clone https://github.com/aiidateam/aiida-optimade /path/to/aiida-optimade/parent/dir
$ pip install -e /path/to/aiida-optimade
For developers, there is a special setuptools extra dev
, which can be installed by:
$ pip install aiida-optimade[dev]
or
$ pip install -e /path/to/aiida-optimade[dev]
This package uses Black for formatting. If you wish to contribute, please install the git pre-commit hook:
/path/to/aiida-optimade$ pre-commit install
This will automatically update the formatting when running git commit
, as well as check the validity of various repository JSON and YAML files.
For testing run pytest
, which will run with an AiiDA backend as standard.
The tests can also be run with the MongoDB backend by setting the environment variable PYTEST_OPTIMADE_CONFIG_FILE
, the value being a path to the config file to be used:
$ PYTEST_OPTIMADE_CONFIG_FILE=/path/to/aiida-optimade/tests/static/test_mongo_config.json pytest
However, note that the mongo_uri
value will have to be updated according to your local setup.
You should first initialize your AiiDA profile.
This can be done by using the aiida-optimade
CLI:
$ aiida-optimade -p <PROFILE> init
Where <PROFILE>
is the AiiDA profile.
Note: Currently, the default is
optimade
, if the-p / --profile
option is not specified. This will be changed in the future to use the default AiiDA profile.
Initialization goes through your profile's StructureData
nodes, adding an optimade
extra, wherein all OPTIMADE-specific fields that do not have an equivalent AiiDA property are stored.
If in the future, more StructureData
nodes are added to your profile's database, these will be automatically updated for the first query, filtering on any of these OPTIMADE-specific fields.
However, if you do not wish a significant lag for the user or risking several GET requests coming in at the same time, trying to update your profile's database, you should re-run aiida-optimade init
for your profile (in between shutting the server down and restarting it again).
Using the aiida-optimade
CLI, you can do the following:
$ aiida-optimade -p <PROFILE> run
Where <PROFILE>
is the AiiDA profile you wish to serve.
Note: Currently, the default is
optimade
, if the-p / --profile
option is now specified. This will be changed in the future to use the default AiiDA profile.
You also have the opportunity to specify the AiiDA profile via the environment variable AIIDA_PROFILE
.
Note, however, that if a profile name is passed to the CLI, it will overrule and replace the current AIIDA_PROFILE
environment variable.
# Specifying AiiDA profile as an environment variable
$ export AIIDA_PROFILE=optimade
$ aiida-optimade run
Navigate to http://localhost:5000/v1/info
Tip: To see the default AiiDA profile, type
verdi profile list
to find the colored profile name marked with an asterisk (*
), or typeverdi profile show
, which will show you more detailed information about the default profile.
Note: The
aiida-optimade run
command has more options to configure your server, run
$ aiida-optimade run --help
for more information.
Adapt profiles/test_psql_dos.json
and profiles/docker-compose.yml
appropriately.
$ docker-compose -f profiles/docker-compose.yml up --build
Navigate to http://localhost:3253/v1/info
Stop by using
$ docker-compose -f profiles/docker-compose.yml down
If you are familiar with Jinja, there are two templates to create the JSON and YAML files: profiles/config.j2
and profiles/docker-compose.j2
, respectively.
You can configure the server with the aiida_optimade/config.json
file or set certain environment variables.
To learn more about this, see the optimade-python-tools
repository.
An AiiDA Group can be used to curate data and serve only this curated data through the OPTIMADE server.
Setting the query_group
option in config.json
will ensure only the valid (StructureData
, CifData
) data nodes in the given AiiDA Group will be served.
Set the query_group
parameter to null
(default) to serve all structure data from the database.
Q: Why create an individual config.json
file instead of just mounting an existing .aiida
directory and using that directly?
A: This, currently, wouldn't work because the REPOSITORY_URI
needs to point to the right path inside the container, not on the host. Furthermore, storing all configurations in the same file can be fragile.
To release the new version, go to GitHub release API of the repo create a new release and update the release information.
The release action will be triggered by newly created release.
Note, the tag should start with a v
and be followed by a full semantic version (see SemVer).
For example: v2.3.12
.
FAQs
Expose an AiiDA database according to the [OPTIMADE API specification](https://www.optimade.org).
We found that aiida-optimade demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.