
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
chemotools
Advanced tools

chemotools is a Python library that brings chemometric preprocessing tools into the scikit-learn ecosystem.
It provides modular transformers for spectral data, designed to plug seamlessly into your ML workflows.
scikit-learn pipelines and transformers.Install from PyPI:
pip install chemotools
Install from Conda:
conda install -c conda-forge chemotools
Example: preprocessing pipeline with scikit-learn:
from sklearn.preprocessing import StandardScaler
from sklearn.pipeline import make_pipeline
from chemotools.baseline import AirPls
from chemotools.scatter import MultiplicativeScatterCorrection
preprocessing = make_pipeline(
AirPls(),
MultiplicativeScatterCorrection(),
StandardScaler(with_std=False),
)
spectra_transformed = preprocessing.fit_transform(spectra)
➡️ See the documentation for full details.
This project uses uv for dependency management and Task to simplify common development workflows. You can get started quickly by using the predefined Taskfile, which provides handy shortcuts such as:
task install # install all dependencies
task check # run formatting, linting, typing, and tests
task coverage # run tests with coverage reporting
task build # build the package for distribution
Contributions are welcome! Check out the contributing guide and the project board.
Released under the MIT License.
This project embraces software supply chain transparency by generating an SBOM (Software Bill of Materials) for all dependencies. SBOMs help organizations, including those in regulated industries, track open-source components, ensure compliance, and manage security risks.
The SBOM file is made public as an asset attached to every release. It is generated using CycloneDX SBOM generator for Python, and can be vsualized in tools like CycloneDX Sunshine.
FAQs
chemotools: A Python Package that Integrates Chemometrics and scikit-learn
We found that chemotools demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.