Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A Python library which uses OpenCASCADE to convert STEP files to a GLB file which can quickly be loaded by trimesh and other libraries.
The primary effort here is build and packaging using the wonderful work done recently on scikit-build-core and cibuildwheel. The goal is to produce wheels that don't require users to build OpenCASCADE themselves.
This is not intended to be a full binding of OpenCASCADE like OCP or PythonOCC. Rather it is intended to be an easy minimal way to load boundary representation files into a triangulated scene in Python. There are a few options for loading STEP geometry in the open-source ecosystem: GMSH, FreeCAD, etc. However nearly all of them use OpenCASCADE under the hood as it is pretty much the only open-source BREP kernel.
The primary goal of this project is building wheels so vanilla pip
can be used:
pip install cascadio
Currently this works on non-MUSL flavors of Linux, Windows x64, and MacOS x64+ARM. You can check PyPi for current platforms.
:warning: :warning: PyPI has a size limit, and each release of this is large! We will not be keeping every release on PyPi (i.e. if we run out of space we delete versions) so be very careful pinning the version! :warning: :warning:
We'll keep the following versions as "LTS" style releases on PyPi:
pip install cascadio==0.0.13
A lot of analysis can be done on triangulated surface meshes that doesn't need the analytical surfaces from a STEP or BREP file.
Developed on Linux which should build wheels locally with docker:
# this doesn't cache the OCCT build unfortunately.
# It would be nice if it did! You could do it by building OCCT
# in the manylinux images and then passing the new tag to CIBW
CIBW_BUILD="cp312-manylinux_x86_64" cibuildwheel --platform linux
Or, if you want to develop that will only work in your local environment for development:
# just run the `before-all` from pyproject.toml which is approximatly:
cd upstream/OCCT
cmake -G Ninja -DCMAKE_BUILD_TYPE=Release \
-DUSE_RAPIDJSON:BOOL="ON" \
-D3RDPARTY_RAPIDJSON_INCLUDE_DIR="../rapidjson/include" .
ninja
mv lin64/gcc/lib .
Then pip install .
will build and install locally. Make sure to point LD_LIBRARY_PATH=upstream/OCCT/lin64/gcc/lib
or wherever you put the libraries.
Pull requests welcome!
stepReader.ReadStream()
instead of a file name. Ideally the Python function signature would be:
convert_to_glb(data: bytes, file_type: str, **parameters) -> bytes
.x_b
/.x_t
and JT .jt
support.FAQs
Convert STEP files to GLB using OpenCASCADE
We found that cascadio demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.