Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
.. image:: https://img.shields.io/pypi/v/correios.svg :target: https://pypi.python.org/pypi/correios :alt: Latest PyPI version
.. image:: https://travis-ci.org/olist/correios.png :target: https://travis-ci.org/olist/correios :alt: Latest Travis CI build status
.. image:: https://codecov.io/gh/olist/correios/branch/master/graph/badge.svg :target: https://codecov.io/gh/olist/correios :alt: Latest coverage status
.. image:: https://app.fossa.com/api/projects/git%2Bgithub.com%2Folist%2Fcorreios.svg?type=shield :target: https://app.fossa.com/projects/git%2Bgithub.com%2Folist%2Fcorreios?ref=badge_shield :alt: FOSSA Status
A client library for Brazilian Correios APIs (SIGEP and SRO) and services.
.. code-block::
$ pip install correios # basic model support $ pip install correios[pdf] # label and posting list pdf generation support $ pip install correios[api] # support for SIGEP/SRO API client $ pip install correios[pdf,api] # full installation
Local WSDL files are used to increase performance on SOAP requests. Enventually you'll want to update them without having to update this lib.
If you want to maintain this files on a custom path you can pass the 'path' option with the custom path. Don't use relative paths.
Just run on shell
.. code-block::
$ update-correios-wsdl -p /path/to/your/custom/wsdl/folder
Arguments: -p, --path : Custom path where wsdl files will be saved, note that this option will have higher priority than the value of the envvar 'CORREIOS_WSDL_PATH'
Or you can use the method update_wsdl to do it.
.. code-block::
from correios.update_wsdl import update_wsdl
update_wsdl(path='/path/to/your/custom/wsdl/folder')
Fork this repository, make changes and send us a pull request. We will review your changes and apply them. Before sending us your pull request please check if you wrote and ran tests:
.. code-block::
$ make test
Also, remember to update the WSDL files:
.. code-block::
$ make update-wsdl
FAQs
A client library for Brazilian Correios APIs and services
We found that correios demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.