Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
ccs-digitalmarketplace-utils
Advanced tools
When logging from applications you should write your message as a format
string and pass any required
arguments to the log method in the extra
named argument. This allows our logging to use them as
separate fields in our JSON logs making it much easier to search and aggregate on them.
logger.info("the user {user_id} did the thing '{thing}'", extra={
'user_id': user_id, 'thing': thing
})
Note that apart from not getting the benefit, passing the formatted message can be dangerous. User
generated content may be passed, unescaped to the .format
method.
Releases of this project follow semantic versioning, ie
Given a version number MAJOR.MINOR.PATCH, increment the:
- MAJOR version when you make incompatible API changes,
- MINOR version when you add functionality in a backwards-compatible manner, and
- PATCH version when you make backwards-compatible bug fixes.
To make a new version:
dmutils/__init__.py
fileWhen the pull request is merged a GitHub Action will tag the new version.
This project has a pre-commit hook to do some general file checks and check the pyproject.toml
.
Follow the Quick start to see how to set this up in your local checkout of this project.
Unless stated otherwise, the codebase is released under the MIT License. This covers both the codebase and any sample code in the documentation.
The documentation is © Crown copyright and available under the terms of the Open Government 3.0 licence.
FAQs
Common utils for Digital Marketplace apps.
We found that ccs-digitalmarketplace-utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.