Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
clipyarser
is a simple, declarative and easy-testable command line argument parser.
Inspired by Typer.
Simply decorate your normal python functions with @clipyarser.main
or @clipyarser.subcommand
and
you have a fully working cli program.
clipyarser
parses the arguments from the console and calls the matching function with the right arguments.
Here we will create a small command line application with clipyarser
.
Create a new directory and an empty main.py
file.
In main.py
import clipyarser
:
from clipyarser import CLI
To create a clipyarser
parser, simply write this to your main.py
file.
from clipyarser import Clipyarser
clipyarser = Clipyarser()
Now we create a simple greeting function.
@clipyarser.main
def main(name: str) -> str:
return f'Hello {name}'
This function simply returns a string which says hello to a person. The name of the person is specified in the arguments of the function.
Note that we use type hints in the function arguments.
This is necessary for clipyarser
, because it parses the arguments from the console according to the specified types.
So when adding an argument age
with type int
, clipyarser
does the parsing and validation of an int
for you.
Now, we have to execute clipyarser
when the program is run.
if __name__ == '__main__':
clipyarser.run()
And that is the first running example of clipyarser
.
Now lets test it.
$ python3 main.py
usage: example.py [-h] name {} ...
example.py: error: the following arguments are required: name
Ok, we have to specify the name of the person we want to greet.
This makes sense, because we take name
as argument in our main()
function.
$ python3 main.py Linus
Hello Linus
Ok nice. That worked.
Sometimes it is convenient that a function has default arguments, which can be overridden when calling the function.
This is also possible with clipyarser
. Let's try to take our greeting function from above and extend it with an
optional argument.
@clipyarser.main
def main(name: str, greeting: str = 'Hello') -> str:
return f'{greeting} {name}'
So a user can customize the greeting. By default, the greeting is 'Hello', but it can be overridden. Now let's see how this looks in the console.
$ python3 main.py Linus
Hello Linus
$ python3 main.py Linus --greeting Hi
Hi Linus
Pretty intiutive, right?
In a bigger application, you may don't want all logic in a main()
function.
Therefore, clipyarser
allows you to add subcommands.
from clipyarser import Clipyarser
clipyarser = Clipyarser()
@clipyarser.subcommand
def add(a: int, b: int) -> int:
return a + b
This subcommand is a function which adds to numbers together.
$ python3 main.py add 2 4
6
But what has happened to the main function? For simplicity, we have deleted it. Let's try to add one again.
@clipyarser.main
def main(verbose: bool = False):
return 'verbose is {verbose}'
Now, when calling our application, the main()
function always runs.
This might be handy when you have some logic or arguments that are independent of am individual subcommand, like a
more verbose output.
$ python3 main.py add 3 2
verbose is False
5
$ python3 main.py --verbose true add 3 2
verbose is True
5
Until now when we want to print something to the console, we just returned it.
This might seem ok, but sometimes you want to print multiple lines or want to print something during a calculation.
But simple do print()
is not a good idea. We will se soon why.
To print multiple lines, use the yield
statement.
Back to our greeting example from the beginning.
from time import sleep
from clipyarser import Clipyarser
clipyarser = Clipyarser()
@clipyarser.main
def main(name: str):
yield 'Hello'
sleep(2)
yield name
yield 42
$ python3 main.py Linus
Hello
Linus
42
Because yield turns main()
into a generator function, the output 'Hello' is printed immediately, but name
takes
two seconds to print.
Maybe one could think of another solution: Just add all things to be printed to a list and return this list at the
end of the function.
This is bad, because the whole output takes two seconds to print, in particular the 'Hello' line.
This makes your clipyarser
not very responsive to the end user.
Ok. But why is just printing a bad idea? Testing.
The advantage of CLI is simple testing.
Functions like main()
and add()
are normal python functions, so you can call them like normal functions.
They take normal arguments. They return normal things.
This means that you can also test these functions like normal functions.
import unittest
from clipyarser import Clipyarser
clipyarser = Clipyarser()
class TestMyCli(unittest.TestCase):
def test_greet(self):
actual = list(main('Linus'))
expected = ['Hello', 'Linus', 42]
self.assertEqual(actual, expected)
Since main()
is a generator function, we can convert its output to a list and check if it is what we expect.
If using print()
, this would not be as easy.
Ok, this is the end of the tutorial. Have fun using clipyarser
.
FAQs
A simple, declarative and easy-testable command line argument parser
We found that clipyarser demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.