Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A fiducial marker system used by Student Robotics. Uses april tag markers to provide detection, pose and distance estimation for these markers.
This library requires OpenCV but the default installation does not install OpenCV. There are a few different versions of OpenCV with different install sizes, to install the default package without OpenCV, run the following command.
pip install april-vision
To install the lightweight headless version OpenCV install the library with the following command.
pip install april-vision[opencv]
If you want to perform some of the more advanced features of the CLI (live view of the camera) you need the full version of OpenCV. The CLI dependecies can be installed with the following command.
pip install april-vision[cli]
Then the full version of OpenCV can then be installed with the following command.
pip install opencv-python>=4.8
All the versions of OpenCV (standard, headless and contrib) clash so you should only have one installed.
from april_vision.examples.camera import setup_cameras
# Markers 0-100 are 80mm in size
tag_sizes = {
range(0, 100): 80
}
# Returns a dict of index and camera
cameras = setup_cameras(tag_sizes)
if len(cameras) == 0:
print("No cameras found")
for name, cam in cameras.items():
print(name)
print(cam.see())
When installed april_vision can be used on the command line providing the following list of useful tools. Each of the tools contain help text on correct usage accessed via the -h
argument.
annotate_image
annotate_video
calibrate
live
marker_generator
vision_debug
tools
family_details
list_cameras
FAQs
An AprilTags wrapper with camera discovery and axis conversion.
We found that april-vision demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.