Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Add the keys from a .toml file to your CLI as arguments. Their values default to the values in the .toml file.
The argtoml
package wraps around argparse
.
It adds the content of a toml file to the cli options.
After parsing, it creates a types.SimpleNameSpace
object.
Argtoml has no mandatory dependencies outside of pythons standard library.
pip install argtoml
You can optionally install tomli_w
if you want to save your configuration at runtime.
pip install 'argtoml[save]'
If there's a src/config.toml
debug = true
home = "~"
[project]
author = "Jono"
name = "argconfig"
pyproject = "./pyproject.toml"
and a src/__main__.py
from argtoml import parse_args # , ArgumentParser
args = parse_args(path=True)
print(args.debug)
print(args.home)
print(args.project.author)
print(args.project.name)
print(args.project.pyproject)
then the shell can look like
$ pwd
/home/jono/project
$ python src/__main__.py --project.name argtoml --no-debug
False
/home/jono
Jono
argtoml
/home/jono/project/pyproject.toml
There is none, the code is not that large, but I expect you to only use:
parse_args(
# An argparse parser for adding extra arguments not present in the toml.
parser: Optional[argparse.ArumentParser] = None,
# An extra help message.
description: str = "",
# The location of the toml file.
toml_path: pathlib.Path = Path("config.toml"),
# The dictionary in which to look for the toml file.
toml_dir: Optional[TPath] = None,
# Whether to try to interpret strings as paths.
base_path: Union[Path, bool] = True,
# Whether to look for the toml file in the parent of the toml_dir folder.
grandparent: bool = True
) -> SimpleNamespace
save(args: Union[SimpleNamespace, dict], path: pathlib.Path):
with open(path, "wb") as f:
tomli_w.dump(args, f)
You are encouraged to specify the location of the toml file when calling parse_args
with an absolute path like this:
parse_args(toml_path="/home/user/dir/my_config.toml")
If you provide a relative path, argtoml
will look for my_config.toml
in the package directory if the main file using argtoml
is from a package, otherwise argtoml
will look for my_config.toml
in the same directory as the main file.
This automatic toml-finding function might change in the future, so probably just provide absolute paths.
If you want to ship a toml file with your package, make sure to add the toml file to your package.
You should also call parse_args
with a relative toml_path
.
This is a personal tool thus far, some idiosyncrasies remain:
python __main__.py --project {author="jo3"} --project.author jjj
, but it should crash if they do this.FAQs
Add the keys from a .toml file to your CLI as arguments. Their values default to the values in the .toml file.
We found that argtoml demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.