
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
askanna
Advanced tools
The AskAnna CLI & Python SDK is part of the AskAnna platform to kickstart your data science projects
The AskAnna CLI offers a command line interface to the AskAnna platform. With the Python SDK you can run AskAnna functions directly from your Python script. The CLI & Python SDK simplifies the communication with the AskAnna platform and provides facilities for supporting every part of a data science project.
For the latest information check the AskAnna Documentation. Or open directly the documentation for:
pip install askanna
pip install -U askanna
askanna login
This will create a .askanna.yml in your home directory.
When the AskAnna CLI & Python SDK is used in for example a CI/CD, one can configure authentication by setting an environment variable:
export AA_REMOTE=https://beta-api.askanna.eu
export AA_TOKEN={{ API TOKEN }}
The API token can be found in the created ~/.askanna.yml file after you logged in with askanna login.
Run the innit-command on the main directory of your project. The command will create a new project on AskAnna and will
add a askanna.yml file to your local project directory. In the askanna.yml file you can configure jobs. For more
information, see the askanna.yml documentation.
askanna init
If you want to start a project from scratch (or a template), you can run the create-command.
askanna create
With the push-command your code will be uploaded to the project in AskAnna.
askanna push
To track metrics for your runs, you can use the function track_metric. For more information, see the
metrics documentation.
from askanna import track_metric
track_metric("name", "value")
To track variables for your runs, you can use the function track_variable. For more information, see the
variables documentation.
from askanna import track_variable
track_variable("name", "value")
FAQs
The AskAnna CLI & Python SDK is part of the AskAnna platform to kickstart your data science projects
We found that askanna demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.