
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Simple Pipeline Scheduler in Python
$ pip install airduct
or
$ poetry add airduct
Create a file and put into a folder/python-module.
from airduct import schedule, task
schedule(
name='ExampleFlow',
run_at='* * * * *',
flow=[
task('e1f1'),
[task('e1f2'), task('e1f3', can_fail=True)],
[task('e1f4')]
]
)
async def e1f1():
print('e1f1 - An async function!')
def e1f2():
print('e1f2 - Regular functions work too')
async def e1f3():
print('e1f3')
async def e1f4():
print('e1f4')
Run: $ airduct schedule --path /path/to/folder
By default it uses a sqlite in-memory database. If using the in-memory database, it will also automatically run as a worker, in addition to a scheduler. If you wish to use a non in-memory sqlite database, you will need to also run a worker (could be on same box, or separate) See the documentation for more info.
FAQs
Simple Pipeline Scheduler in Python
We found that airduct demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.