
Research
Security News
Malicious npm Packages Use Telegram to Exfiltrate BullX Credentials
Socket uncovers an npm Trojan stealing crypto wallets and BullX credentials via obfuscated code and Telegram exfiltration.
ckanext-googleanalyticsbasic
Advanced tools
Basic extension to add google analytics tracking code in page header
Puts the Google Analytics asynchronous tracking code into your page headers for basic Google Analytics page tracking.
Install the extension as usual, e.g. (from an activated virtualenv) ::
$ pip install -e git+https://github.com/GSA/ckanext-googleanalyticsbasic#egg=ckanext-googleanalyticsbasic
Edit your development.ini (or similar) to provide space separated list of google ids ::
googleanalytics.ids = UA-1010101-1 UA-1010101-2
Edit again your configuration ini file to activate the plugin with: ::
ckan.plugins = googleanalyticsbasic
This extension is compatible with these versions of CKAN.
CKAN version | Compatibility |
---|---|
<=2.8 | no |
2.9 | yes |
2.10 | yes |
All the tests live in the /ckanext/geodatagov/tests folder.
To start environment, run:
docker-compose build
docker-compose up
CKAN will start at localhost:5000
To shut down environment, run:
docker-compose down
To docker exec into the CKAN image, run:
docker-compose exec app /bin/bash
They follow the guidelines for testing CKAN extensions.
To run the extension tests, start the containers with make up
, then:
$ make test
Lint the code.
$ make lint
The development environment drops as many dependencies as possible. It is not meant to have feature parity with GSA/catalog.data.gov. Tests should mock external dependencies where possible.
In order to support multiple versions of CKAN, or even upgrade to new versions
of CKAN, we support development and testing through the CKAN_VERSION
environment variable.
$ make CKAN_VERSION=2.10 test
FAQs
Basic extension to add google analytics tracking code in page header
We found that ckanext-googleanalyticsbasic demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket uncovers an npm Trojan stealing crypto wallets and BullX credentials via obfuscated code and Telegram exfiltration.
Research
Security News
Malicious npm packages posing as developer tools target macOS Cursor IDE users, stealing credentials and modifying files to gain persistent backdoor access.
Security News
AI-generated slop reports are making bug bounty triage harder, wasting maintainer time, and straining trust in vulnerability disclosure programs.