Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
A simple optionally-async python inotify library, focused on simplicity of use and operation, and leveraging modern Python features
An async python inotify package. Kept as simple and easy-to-understand as possible, while still being flexible and powerful. This is built on no external dependencies, and works through ctypes in a very obvious fashion.
This depends on Python 3.6+ features, and will not work with prior versions.
This works without any other external dependencies.
The code is available on GitHub_ and the documentation is available on ReadTheDocs_. The package itself is available on PyPi_.
You know the drill::
pip install asyncinotify
The core of this package is asyncinotify.Inotify
. Most important
Classes may be imported directly from the asyncinotify
package.
.. code-block:: python
from pathlib import Path from asyncinotify import Inotify, Mask import asyncio
async def main(): # Context manager to close the inotify handle after use with Inotify() as inotify: # Adding the watch can also be done outside of the context manager. # enter doesn't actually do anything except return self. # This returns an asyncinotify.inotify.Watch instance inotify.add_watch('/tmp', Mask.ACCESS | Mask.MODIFY | Mask.OPEN | Mask.CREATE | Mask.DELETE | Mask.ATTRIB | Mask.CLOSE | Mask.MOVE | Mask.ONLYDIR) # Iterate events forever, yielding them one at a time async for event in inotify: # Events have a helpful repr. They also have a reference to # their Watch instance. print(event)
# the contained path may or may not be valid UTF-8. See the note
# below
print(repr(event.path))
asyncio.run(main())
This will asynchronously watch the /tmp directory and report events it encounters.
This library also supports synchronous operation, using the `asyncinotify.inotify.Inotify.sync_get`` method, or simply using synchronous iteration.
There are a few different python inotify packages. Most of them either have odd conventions, expose too much of the underlying C API in a way that I personally don't like, are badly documented, they work with paths in a non-idiomatic way, are not asynchronous, or are overengineered compared to the API they are wrapping. I find that the last one is true for the majority of them.
I encourage everybody to read the sources <GitHub_>
_ of this package. They are
quite simple and easy to understand.
This library
Works in a very simple way. It does not have add-ons or extra features beyond presenting a very Python interface to the raw inotify functionality.
Grabs events in bulk and caches them for minor performance gains.
Leverages IntFlag for all masks and flags, allowing the user to use the
features of IntFlag, such as seeing individual applied flags in the repr
,
checking for flag set bits with in
.
Exposes all paths via python's pathlib_
Exposes all the functionality of inotify without depending on the user having to interact with any of the underlying mechanics of Inotify. You should never have to touch the inotify or watch descriptors for any reason.
The primary motivation is that this is written to be a Python inotify module that I would feel comfortable using.
.. _ospackage: https://docs.python.org/3/library/os.html#file-names-command-line-arguments-and-environment-variables .. _surrogateescape: https://docs.python.org/3/library/codecs.html#surrogateescape .. _GitHub: https://github.com/ProCern/asyncinotify .. _pathlib: https://docs.python.org/3/library/pathlib.html .. _ReadTheDocs: https://asyncinotify.readthedocs.io/en/latest/ .. _PyPi: https://pypi.org/project/asyncinotify/
FAQs
A simple optionally-async python inotify library, focused on simplicity of use and operation, and leveraging modern Python features
We found that asyncinotify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.