Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Our python tool-box is supposed to help professionals in their day-to-day work.
Everything started when reaching blocking limitations with MS Excel, forcing us to search for alternatives. We learned Python, and started to implement reusable snippets.
As of 2021, we have a first workable snippet (yet perfectible), and we target to progressively (even-though slowly) enrich this tool-box, focusing on "IT project management" related stuff (as a start?).
In case you have feedbacks, ideas or suggestions, please let us know!
By definition, a good project manager is predictable, right?
But what do we mean by “being predictable”? Let’s say that “Predictabilty” is about accurately predicting early enough the project outcomes, to enable timely corrective actions that increase the likelihood of achieving targets and reducing outcome variance.
Ok, fair enough. But how do we measure a project manager “predictable-ness”?
The module com.enovation.toolbox.predictability.dp_date_predictability
exposes several commands to deal with date predictability:
Command | Description |
---|---|
dp_compute | To compute the predictability for historical prediction of a date (eg. go live date, deal closure date) |
dp_persist | To persist into an excel file the outputs from the command dp_compute |
dp_load | To load the outputs from the command dp_compute that were persisted into an excel file |
dp_graph | To visualize the outputs from the command dp_compute into a graph powered by dash |
dp_demo | To demonstrate some of the above command |
When installing com-enovation
, the following packages will be deployed automatically by pip
:
pandas
: to handle dataframes, series, etcclick
: to handle command lineenlighten
: to display a progress bar for lengthy stepsopenpyxl
: to handle xlsx
filesxlwt
: that is a dependency for pandas.io.excel
xlrd
: yet another dependency for pandas.io.excel
dash
: to graphscipy
: to compute date predictability without resampling measures, using special.psi
functionxlsxwriter
: to produce excel spreadsheet. Used in excel_dashboard
jsonschema
: to check json parameters. Used in excel_dashboard
pywin32
: to access Windows API from Python, such as opening Excel, refreshing data and saving. Used in helper.excel
. Note: only working on Windows... Cannot be installed on MAC or Linux.Python 3
is installed on your machinepip
is installed on your machinecom-enovation
tool-box: python3 -m pip install com-enovation
python3
>>> import com.enovation
PATH
com-enovation
tool-box: pip install --upgrade com-enovation
enov -- help
in a terminalenov load-csv --help
enov load-csv ./the-csv-file-to-load.csv
enov load-csv ./the-csv-file-to-load.csv -c the-first-column-label-to-load -c the-second-one
enov --verbose load-csv ./the-csv-file-to-load.csv -c the-first-column-label-to-load -c the-second-one
from root directory
build the distribution files and directories: python3 -m build
build
and dist
should be generatedNo module named build
, you need first to run pip install build
publish to pypi
: python3 -m twine upload --repository pypi dist/*
No module named twine
, you need first to run pip install twine
Commands to execute from the root directory com.enovation
In the left pan:
src
: mark as Sources Root
tests
: DO NOT mark as anything...Unit test configuration, from menu Run > Edit Configurations...
Configuration > Target > Script path: /Users/jsg/PycharmProjects/com.enovation/tests
Configuration > Working directory: /Users/jsg/PycharmProjects/com.enovation/
Configuration > Add content roots to PYTHONPATH: checked
Configuration > Add source roots to PYTHONPATH: checked
Check we have latest versions:
python3 -m pip install --upgrade pip
python3 -m pip install --upgrade build
python3 -m pip install --upgrade twine
Update packages using pip
pip check
pip list --outdated
pip list --outdated --format=freeze | grep -v '^\-e' | cut -d = -f 1 | xargs -n1 pip install -U
A simple example package. You can use Github-flavored Markdown to write your content.
To debug a running Click application:
FAQs
project management toolbox
We found that com-enovation demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.