
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
cloudstack-orchestrator
Advanced tools
CloudStack Orchestrator SDK and CLI for automated Kubernetes platform management
A unified SDK and CLI for automated Kubernetes platform management using GitOps principles.
# Install from PyPI
uv tool install cloudstack-orchestrator
# Or add to your project
uv add cloudstack-orchestrator
# Interactive setup
cso setup
# Non-interactive setup
cso setup \
--provider aws \
--cluster my-cluster \
--domain platform.example.com \
--github-org my-org \
--region us-east-1
# Check status
cso status
# Validate prerequisites
cso validate
from cloudstack_orchestrator import CloudStackSDK, Config, CloudProvider
from cloudstack_orchestrator.core.config import GitHubConfig
# Create configuration
config = Config(
provider=CloudProvider.AWS,
region="us-east-1",
cluster_name="my-cluster",
domain="platform.example.com",
github=GitHubConfig(
org="my-org",
token="ghp_..."
)
)
# Initialize SDK
sdk = CloudStackSDK(config)
# Run setup
await sdk.setup()
# Check status
status = await sdk.get_status()
CloudStack Orchestrator sets up:
# Clone the repository
git clone https://github.com/killerapp/cloudstack-orchestrator
cd cloudstack-orchestrator/cso-cli
# Install dependencies
uv sync
# Run tests
uv run pytest
# Run CLI in development
uv run python -m cloudstack_orchestrator.cli
# Build the package
uv build
# Publish to PyPI
uv publish
MIT
FAQs
CloudStack Orchestrator SDK and CLI for automated Kubernetes platform management
We found that cloudstack-orchestrator demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.