Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Python 3 library to parse bibtex <https://en.wikipedia.org/wiki/BibTeX>
_ files.
.. contents::
Our documentation includes the installation procedure, a tutorial, the API and advices to report a bug:
Documentation on readthedocs.io <https://bibtexparser.readthedocs.io/>
_
Please, read the changelog before upgrading regarding API modifications.
Dual license (at your choice):
See COPYING for details.
The original source code was part of bibserver from OKFN <http://github.com/okfn/bibserver>
_. This project is released under the AGPLv3. OKFN and the original authors kindly provided the permission to use a subpart of their project (ie the bibtex parser) under LGPLv3. Many thanks to them!
The parser evolved to a new core based on pyparsing.
Since 2022, after a long stale period, this library has a new maintainer (@MiWeiss <https://github.com/MiWeiss>
_).
v2
AnnouncementVersion 1.x, is trusted and used by more than 1300 projects, with much of its code being ~10 years old. Our primary objective in maintaining v1.x is to provide stability and backwards compatibility to these projects - such that they can safely and easily migrate to new versions.
Still, there's much room for large-scale improvements and changes to modernize bibtexparser. Hence, we are working on a new version 2.0.0 which is a complete rewrite of the library, providing amongst other the following advantages:
Check out the v2 dev branch <https://github.com/sciunto-org/python-bibtexparser/tree/v2>
_ and the v2 coordination issue <https://github.com/sciunto-org/python-bibtexparser/issues/318>
_ to get a sneak preview. Also - if you're keen - we're always looking for contributors. Do not hesitate to get in contact with us.
FAQs
Bibtex parser for python 3
We found that bibtexparser demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.