Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
aind-exaspim-pipeline-utils
Advanced tools
Code repository to be installed in exaSPIM processing capsules.
The ImageJ wrapper module contains Fiji macro templates and wrapper code to
automatically run interest point detection and interest point based registration
in the Code Ocean capsule. This functionality is set as the main entry point of
the package if the whole package is invoked on the command line or the
aind_exaspim_pipeline
command is run.
#!/usr/bin/env bash
set -ex
cd ~/capsule
imagej_wrapper "$@"
The N5 to zarr converter sets up a local dask cluster with multiple python processes as workers to read in an N5 dataset and write it out in a multiscale Zarr dataset. Both datasets may be local or directly on S3. AWS credentials must be available in the environment (Code Ocean credential assignment to environment variables).
This implementation is based on dask.array (da).
This command takes a manifest json file as the only command line argument or looks it
up at the hard-wired data/manifest/exaspim_manifest.json
location if not specified.
To set up a code ocean capsule, use the following run.sh
script:
#!/usr/bin/env bash
set -ex
cd ~/capsule
n5tozarr_da_converter "$@"
To use the software, in the root directory, run
pip install -e .
To develop the code, run
pip install -e .[dev]
For n5tozarr and zarr multiscale conversion, install as
pip install -e .[n5tozarr]
There are several libraries used to run linters, check documentation, and run tests.
coverage run -m unittest discover && coverage report
interrogate .
flake8 .
black .
isort .
For internal members, please create a branch. For external members, please fork the repository and open a pull request from the fork. We'll primarily use Angular style for commit messages. Roughly, they should follow the pattern:
<type>(<scope>): <short summary>
where scope (optional) describes the packages affected by the code changes and type (mandatory) is one of:
To generate the rst files source files for documentation, run
sphinx-apidoc -o doc_template/source/ src
Then to create the documentation HTML files, run
sphinx-build -b html doc_template/source/ doc_template/build/html
More info on sphinx installation can be found here.
FAQs
AIND exaSPIM pipeline utilities.
We found that aind-exaspim-pipeline-utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.