Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Declarative, instant REST APIs for base AI Models based on instarest, a FastAPI, Pydantic, SQLAlchemy, and PostgreSQL library, and MinIO.
To get started with aimbase
for your application, visit the docs at https://aimbase.erob.io/
To contribute to aimbase
, see the contributing section below.
Launch postgres and pgadmin via docker-compose docker-compose up --build
.
Keeping your containers running, open a new terminal with the root of this repo as the working directory. Install poetry
: pip install poetry
(or use pipx
on link here if you prefer isolated envs, or consider using conda
).
Create and enter the virtual environment: poetry shell
Install the dependencies poetry install
Start the app: uvicorn examples.example_app:auto_app --reload
.
Open localhost:8000/v1/docs
and start interacting with swagger!
You can shut down and your db / minio data will persist via docker volumes.
localhost:9001
. Login with user:miniouser
and password:minioadmin
if you launched the containers with docker-compose up --build
.Set up the precommit hook with pre-commit install
.
Run tests and get coverage with pytest --cov
, and get html reports for vs code live server (or any server) with pytest --cov --cov-report=html:coverage_re
Open a pull request against the repo! Please write tests, your coverage will automatically be added as a comment to any PR via GH actions.
pip install -r requirements-docs.txt
.mkdocs
with pip install mkdocs-material
.docs/en
directory via cd docs/en
.mkdocs serve
to start a local server.FAQs
Declarative, instant REST APIs for base AI Models based on instarest, a FastAPI, Pydantic, SQLAlchemy, and PostgreSQL library, and MinIO.
We found that aimbase demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.