
Research
Malicious npm Package Brand-Squats TanStack to Exfiltrate Environment Variables
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.
dcurves
Advanced tools
A Python package for Decision Curve Analysis to evaluate prediction models, molecular markers, and diagnostic tests.
Diagnostic and prognostic models are typically evaluated with measures of accuracy that do not address clinical consequences. Decision-analytic techniques allow assessment of clinical outcomes, but often require collection of additional information that may be cumbersome to apply to models that yield continuous results.
Decision Curve Analysis is a method for evaluating and comparing prediction models that incorporates clinical consequences, requiring only the data set on which the models are tested, and can be applied to models that have either continuous or dichotomous results.
dcurves is a Python package for performing Decision Curve Analysis (DCA). It evaluates and compares prediction models for both binary and survival outcomes.
Main functions:
dca(): Performs Decision Curve Analysis, calculating net benefit and interventions avoidedplot_graphs(): Visualizes DCA resultshttps://mskcc-epi-bio.github.io/dcurves/
This tutorial will guide you through installing and using the dcurves package to perform Decision Curve Analysis (DCA) with sample cancer diagnosis data.
# Install dcurves for DCA
pip install dcurves
# Import Libraries
from dcurves import dca, plot_graphs
import pandas as pd
import numpy as np
# Load Sample Data (or use your own)
df_binary = pd.read_csv(
"https://raw.githubusercontent.com/MSKCC-Epi-Bio/dcurves/main/dcurves/data/df_binary.csv"
)
# Perform Decision Curve Analysis
df_dca = dca(
data=df_binary,
outcome='cancer',
modelnames=['famhistory'],
thresholds=np.arange(0, 0.36, 0.01),
)
# Standard DCA Plot
plot_graphs(
plot_df=df_dca,
graph_type='net_benefit',
y_limits=[-0.05, 0.2]
)

Visit https://www.decisioncurveanalysis.org
Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.
Please make sure to update tests as appropriate.
FAQs
A Python package for Decision Curve Analysis to evaluate prediction models, molecular markers, and diagnostic tests.
We found that dcurves demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.

Research
Compromised SAP CAP npm packages download and execute unverified binaries, creating urgent supply chain risk for affected developers and CI/CD environments.

Company News
Socket has acquired Secure Annex to expand extension security across browsers, IDEs, and AI tools.