Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
async-files is a fast, lightweight, and extensible asyncio file library, written in pure python and inspired by aiofiles. This works just like aiofiles which delegates file IO operations to a separate thread pool. Although, async-files have been completely re-written from scratch to use modern async...await...
syntax and with extensibility and flexibility in mind.
Files can be opened with async context manager or by calling FileIO instance.
async with FileIO("README.md") as f:
s = await f.read()
print(s)
or
f = await FileIO("README.md")() # __init__ can't be asynchronous.
s = await f.read()
print(s)
await f.close()
Asynchronous iteration is also supported.
async with FileIO("README.md") as f:
async for line in f:
print(line, end="")
You can also extend functionality of FileIO to support other classes like tempfile.TemporaryFile
very easily:
from tempfile import TemporaryFile as _TemporaryFile
from async_files import FileIO
class TemporaryFile(FileIO):
OPEN = _TemporaryFile
You can do same for any other IO classes like gzip.GzipFile
, zipfile.ZipFile
, etc.
I have added async version of tempfile and gzip modules in the v0.2
since they are commonly used modules and I will add more modules in the future releases.
You can use these modules just like you use standard library module, only difference is you need to await coroutine methods.
You can request for support for new modules by creating new issue.
You can also create coroutine from any blocking function by using async-files's utility function async_wraps
. For example:
import shutil
from async_files.utils import async_wraps
async_rmtree = async_wraps(shutil.rmtree)
You can also use async_wraps
as a decorator for your custom function.
Note: Only use
async_wraps
if target function is IO-bound.
Following are asynchronous attributes of the FileIO object.
close: Callable[[], Awaitable[None]]
flush: Callable[[], Awaitable[None]]
isatty: Callable[[], Awaitable[bool]]
read: Callable[[], Awaitable[Union[str, bytes]]]
read1: Callable[[], Awaitable[bytes]]
readinto: Callable[[bytearray], Awaitable[int]]
readinto1: Callable[[bytearray], Awaitable[int]]
readline: Callable[[], Awaitable[Union[str, bytes]]]
readlines: Callable[[], Awaitable[List[Union[str, bytes]]]]
seek: Callable[[], Awaitable[int]]
tell: Callable[[], Awaitable[int]]
truncate: Callable[[], Awaitable[int]]
write: Callable[[Union[str, bytes]], Awaitable[int]]
writelines: Callable[[List[Union[str, bytes]]], Awaitable[None]]
Other attributes are synchronous just like standard library fileobj.
Bugs and feature requests can be made via GitHub issues. Be aware that these issues are not private, so take care when providing output to make sure you are not disclosing security issues in other products.
Pull requests are also welcome via git.
The async-files uses sourcery
, restyled
and code factor
bots to ensure code quality of the PR.
FAQs
Async Files
We found that async-files demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.