
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
canvas-painter
Advanced tools
Canvas is a small Python graphics library written in SFML.
In the future, Canvas will be bigger and maybe even a famous library, but we can only hope.
First of all, you need to import it.
In your selected terminal, run:
pip install canvas_painter
Then in your Python script (e.g. script.py):
import canvas_painter
canvas.init() Initializes the drawing canvas/window.
canvas.load_fonts()
Loads the default fonts included in the package. You should call this before drawing text.
canvas.draw_circle(radius, fill_color, outline_color, outline_thickness, x, y)
Draw a circle with:
canvas.draw_rectangle(height, length, fill_color, outline_color, outline_thickness, x, y)
Draw a rectangle with similar parameters to draw_circle.
canvas.draw_text(text, font_name, size, color, x, y)
Draw text string with:
canvas.draw_line(x1, y1, x2, y2, color)
Draw a line between (x1, y1) and (x2, y2) with specified color.
canvas.get_mouse_pos()
Returns the current mouse position relative to the window as an (x, y) tuple.
canvas.run()
Opens the window and starts rendering your shapes and text. This blocks until you close the window.
canvas.clear()
Clears the window content (fill with black). You can call this between frames.
import canvas
canvas.init()
canvas.load_fonts()
canvas.draw_circle(50, "red", "white", 3, 100, 100)
canvas.draw_rectangle(80, 120, "blue", "yellow", 5, 200, 150)
canvas.draw_text("Hello Canvas!", "roboto", 24, "cyan", 50, 30)
canvas.run()
Happy drawing! 🎨✨
If you find bugs or want features, feel free to open an issue or pull request on GitHub.
Canvas is a community project and is still growing.
Thanks for checking it out!
FAQs
Canvas is a simple Python graphics library using SFML.
We found that canvas-painter demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.