Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
bincrafters-package-tools
Advanced tools
This project contains files used by Conan Package Tools for all kinds of bincrafters builds.
These scripts are used during build process to allow for rapid testing and prototyping at this time.
To install by pip is just one step
If you want to install by local copy
pip install .
Or if you want to download our pip package
pip install bincrafters_package_tools
All variables supported by Conan package tools, are treated by Bincrafters package tools as well. To solve the upload, some variables are customized by default:
CONAN_UPLOAD: https://bincrafters.jfrog.io/artifactory/api/conan/public-conan
CONAN_REFERENCE: Fields name and version from conanfile.py
CONAN_USERNAME: Get from CI env vars. Otherwise, use bincrafters
CONAN_VERSION: Get from CI env vars.
CONAN_VERSION: Field version from conanfile.py
CONAN_UPLOAD_ONLY_WHEN_STABLE: True for default template. False for Boost builds.
CONAN_STABLE_BRANCH_PATTERN: stable/*
CONAN_ARCHS: Only x86_64 per default. To build 32-bit and 64-bit use e.g. [x86_64, x86]
BPT SPECIFIC ENVIRONMENT VARIBLES:
BPT_MATRIX_SPLIT_BY_BUILD_TYPES: Splits build jobs into Release
and Debug
build jobs.
BPT_MATRIX_DISCARD_DUPLICATE_BUILD_IDS: true
/false
, default: true
. This does NOT YET what it says. Right now, this only has an effect for installer_only and header_only recipes when set to false
. In those cases, you get the full build matrix, instead of a shortened build matrix. In the future, the matrix generation actually compares build IDs and discards jobs based on the IDs.
To install extra packages required to test
pip install .[test]
To run all unit test + code coverage, just execute:
pip install -r bincrafters/requirements_test.txt
cd tests
pytest -v --cov=bincrafters
FAQs
Bincrafters Packaging tools for build Conan projects
We found that bincrafters-package-tools demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.