
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
dask-felleskomponenter
Advanced tools
This is a repo where we make available governance components, common functions and reusable UDFs. DASK felleskomponenter is still in an early stage of the development process.
You can find the PyPI package here.
You need to install Python3.7 and higher, and to install the dependencies of this project, please execute the following command
pip install -r requirements.txt
Navigate to the Publish to PyPI workflow in GitHub Actions, choose the main
branch and bump the version.
One member of Team DASK needs to approve the workflow run before it starts.
setup.py
, for instance 0.0.7
->0.0.8
pip install -r requirements.txt
if you haven't done that earlier)python3 -m build
(and wait some minutes...)python3 -m twine upload dist/*
to upload to pypiReplace the last command with python3 -m twine upload --repository testpypi dist/*
Use the following command
coverage run -m unittest discover -s src/dask_felleskomponenter/tests
coverage report -m
FAQs
Felleskomponenter på DASK
We found that dask-felleskomponenter demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.