Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Transform directed acyclic graphs using map-reduce and groupby operations
This library is an attempt to merge the concepts of directed acyclic graphs (DAG) with array-like objects such as NumPy arrays, Pandas DataFrames, or Xarray/Scipp DataArrays. This could be useful for describing tasks graphs, e.g., when a series of tasks is applied to chunks of an array. These tasks also have an array structure. After an reduction operation of chunks, the graph loses this structure, i.e., only a subset of the graph's nodes has array structure. What if we could work with this structure, even though only parts of the graph follows it? And what if we could use the power of array slicing with named dimensions, or select by label? This is what Cyclebane tries to do.
Our initial goal is to support:
map
operations of a DAG's source nodes over an array-like (https://docs.dask.org/en/latest/high-level-graphs.html).
Cyclebane will effectively copy all descendants of those nodes, once for each array element.
Cyclebane will support joint mappings of multiple source nodes by mapping over, e.g., a DataFrame with multiple columns, as well as chaining independent map operations at different source nodes.
In the latter case this will effectively broadcast at descendant nodes that depend on multiple such source nodes.reduce
operations at descendants of mapped nodes.
This will add a new node with edges to all copies of the mapped node being reduced.
Cyclebane will support reducing only individual axes or all axes, similar to Numpy.groupby
operations similar to Pandas and Xarray (albeit more limited).map
(or groupby
) operations based on their indices.
The graph structure will be left untouched, i.e., nodes after a reduce
operation will be preserved, but fewer edges will lead to the reduce node.See also Dask's High Level Graphs for a related concept (without the direct support for any such operations).
python -m pip install cyclebane
FAQs
Transform directed acyclic graphs using map-reduce and groupby operations
We found that cyclebane demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.