Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Analog is a weblog analysis utility that provides these metrics:
Documentation is on analog.readthedocs.org <http://analog.readthedocs.org/>
,
code and issues are on github.com/fabianbuechler/analog <https://github.com/fabianbuechler/analog>
and the package can be installed
from PyPI at pypi.python.org/pypi/analog <https://pypi.python.org/pypi/analog>
_.
Provide yaml config file for Travis-CI.
Extend tox environments to cover 2.7, 3.2, 3.3, 3.4, pypy and pypy3.
Convert repository to git and move to github.
Set version only in setup.py, use via pkg_resources.get_distribution.
Test analog.analyzer
implementation.
Test analog.utils
implementation.
Test analog.renderers
implementation.
Fix bug in default plaintext renderer.
analog.report.Report
implementation and fix some bugs.--max_age
option to --max-age
for consistency.Ignore init.py at PEP257 checks since all is not properly supported.
Fix custom log format definitions. Format selection in CLI via subcommands.
Add pypy to tox environments.
Remove dependency on configparser package for Python 2.x.
Allow specifying all analog
arguments in a file for convenience.
Include CHANGELOG in documentation.
Move VERSION file to analog module to make sure it can be installed.
analyzer
.
Also use the fallbacks in analog.analyzer.Analyzer.__init__
and
analog.analyzer.analyze
.Add numpy to requirements.txt
since installation via setup.py install
does not work.
Strip VERSION when reading it in setup.py.
Start documentation: quickstart and CLI usage plus API documentation.
Add renderers for CSV and TSV output. Use --output [csv|tsv]. Unified codebase for all tabular renderers.
Add renderer for tabular output. Use --output [grid|table].
Also analyze HTTP verbs distribution for overall report.
Remove timezone aware datetime handling for the moment.
Introduce Report.add method to not expose Report externals to Analyzer.
Install pytz on Python <= 3.2 for UTC object. Else use datetime.timezone.
Add tox environment for py2.7 and py3.3 testing.
Initial implementation of log analyzer and report object.
Initial package structure, docs, requirements, test scripts.
FAQs
analog - Log Analysis Utility
We found that analog demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.